What's in my provisioning package?

The Set up School PCs app builds a specialized provisioning package with school-optimized settings.

A key feature of the provisioning package is Shared PC mode. To view the technical framework of Shared PC mode, including the description of each setting, see the SharedPC configuration service provider (CSP) article.

Shared PC Mode policies

This table outlines the policies applied to devices in shared PC mode. If you selected to optimize a device for use by a single student, the table notes the differences. Specifically, you'll see differences in the following policies:

  • Disk level deletion
  • Inactive threshold
  • Restrict local storage

In the table, True means that the setting is enabled, allowed, or applied. Use the Description column to help you understand the context for each setting.

For a more detailed look at the policies, see the Windows article Set up shared or guest PC.

Policy name Default value Description
Enable Shared PC mode True Configures the PCs so they are in shared PC mode.
Set education policies True School-optimized settings are applied to the PCs so that they are appropriate for an educational environment. To see all recommended and enabled policies, see Windows 10 configuration recommendation for education customers.
Account Model Only guest, Domain-joined only, or Domain-joined and guest Controls how users can sign in on the PC. Configurable from the Set up School PCs app. Choosing domain-joined will enable any user in the domain to sign in. Specifying the guest option will add the Guest option to the sign-in screen and enable anonymous guest access to the PC.
Deletion policy Delete at disk space threshold and inactive threshold Delete at disk space threshold will start deleting accounts when available disk space falls below the threshold you set for disk level deletion. It will stop deleting accounts when the available disk space reaches the threshold you set for disk level caching. Accounts are deleted in order of oldest accessed to most recently accessed. Also deletes accounts if they have not signed in within the number of days specified by inactive threshold policy.
Disk level caching 50% Sets 50% of total disk space to be used as the disk space threshold for account caching.
Disk level deletion For shared device setup, 25%; for single device-student setup, 0%. When your devices are optimized for shared use across multiple PCs, this policy sets 25% of total disk space to be used as the disk space threshold for account caching. When your devices are optimized for use by a single student, this policy sets the value to 0% and does not delete accounts.
Enable account manager True Enables automatic account management.
Inactive threshold For shared device setup, 30 days; for single device-student setup, 180 days. After 30 or 180 days, respectively, if an account has not signed in, it will be deleted.
Kiosk Mode AMUID Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy!App Configures the kiosk account on student devices to only run the Take a Test secure assessment browser.
Kiosk Mode User Tile Display Text Take a Test Displays "Take a Test" as the name of the kiosk account on student devices.
Restrict local storage For shared device setup, True; for single device-student setup, False. When devices are optimized for shared use across multiple PCs, this policy forces students to save to the cloud to prevent data loss. When your devices are optimized for use by a single student, this policy does not prevent students from saving on the PCs local hard drive.
Maintenance start time 0 - midnight The maintenance start time when automatic maintenance tasks, such as Windows Update, run on student devices.
Max page file size in MB 1024 Sets the maximum size of the paging file to 1024 MB. Applies only to systems with less than 32-GB storage and at least 3 GB of RAM.
Set power policies True Prevents users from changing power settings and turns off hibernate. Also overrides all power state transitions to sleep, such as lid close.
Sign in on resume True Requires the device user to sign in with a password when the PC wakes from sleep.
Sleep timeout 3600 seconds Specifies the maximum idle time before the PC should sleep. If you don't set sleep timeout, the default time, 3600 seconds (1 hour), is applied.

MDM and local group policies

This section lists only the MDM and local group policies that are configured uniquely for the Set up School PCs app.

For a more detailed look of each policy listed, see Policy CSP in the Windows IT Pro Center documentation.

Policy name Default value Description
Authority User-defined Authenticates the admin user. Value is set automatically when signed in to Azure AD.
BPRT User-defined Value is set automatically when signed in to Azure AD. Allows you to create the provisioning package.
WLAN Setting XML is generated from the Wi-Fi profile in the Set up School PCs app. Configures settings for wireless connectivity.
Hide OOBE for desktop True Hides the interactive OOBE flow for Windows 10.
Download Mode 1 - HTTP blended with peering behind the same NAT Specifies the download method that Delivery Optimization can use in downloads of Windows Updates, Apps, and App updates
Select when Preview Builds and Feature Updates are received 32 - Semi-annual Channel. Device gets feature updates from Semi-annual Channel Specifies how frequently devices receive preview builds and feature updates.
Allow auto update 4 - Auto-installs and restarts without device-user control When an auto update is available, it auto-installs and restarts the device without any input or action from the device user.
Configure automatic updates 3 - Set to install at 3am Scheduled time to install updates.
Update power policy for cart restarts 1 - Configured Skips all restart checks to ensure that the reboot will happen at the scheduled install time.
Select when Preview Builds and Feature Updates are received 365 days Defers Feature Updates for the specified number of days. When not specified, defaults to 365 days.
Allow all trusted apps Disabled Prevents untrusted apps from being installed to device
Allow developer unlock Disabled Students cannot unlock the PC and use it in developer mode
Allow Cortana Disabled Cortana is not allowed on the device.
Allow manual MDM unenrollment Disabled Students cannot remove the mobile device manager from their device.
Settings page visibility Enabled Specific pages in the System Settings app are not visible or accessible to students.
Allow add provisioning package Disabled Students cannot add and upload new provisioning packages to their device.
Allow remove provisioning package Disabled Students cannot remove packages that you've uploaded to their device, including the Set up School PCs app
Start Layout Enabled Lets you specify the Start layout for users and prevents them from changing the configuration.
Import Edge Assets Enabled Import Microsoft Edge assets, such as PNG and JPG files, for secondary tiles on the Start layout. Tiles will appear as weblinks and will be tied to the relevant image asset files.
Allow pinned folder downloads 1 - The shortcut is visible and disables the setting in the Settings app Makes the Downloads shortcut on the Start menu visible to students.
Allow pinned folder File Explorer 1 - The shortcut is visible and disables the setting in the Settings app Makes the File Explorer shortcut on the Start menu visible to students.
Personalization Deploy lock screen image Set to the image you picked when you customized the lock screen during device setup. If you didn't customize the image, the computer will show the default.
Personalization Lock screen image URL Image filename
Update Active hours end 5 PM
Update Active hours start 7 AM
Updates Windows Nightly Sets Windows to update on a nightly basis.

Apps uninstalled from Windows 10 devices

Set up School PCs app uses the Universal app uninstall policy. This policy identifies default apps that are not relevant to the classroom experience, and uninstalls them from each device. ALl apps uninstalled from Windows 10 devices include:

  • Mixed Reality Viewer
  • Weather
  • Desktop App Installer
  • Tips
  • Messaging
  • My Office
  • Microsoft Solitaire Collection
  • Mobile Plans
  • Feedback Hub
  • Xbox
  • Mail/Calendar
  • Skype

Apps installed on Windows 10 devices

Set up School PCs uses the Universal app install policy to install school-relevant apps on all Windows 10 devices. Apps that are installed include:

  • OneDrive
  • OneNote
  • Sway

Provisioning time estimates

The time it takes to install a package on a device depends on the:

  • Strength of network connection
  • Number of policies and apps within the package
  • Additional configurations made to the device

Review the table below to estimate your expected provisioning time. A package that only applies Set Up School PC's default configurations will provision the fastest. A package that removes pre-installed apps, through CleanPC, will take much longer to provision.

Configurations Connection type Estimated provisioning time
Default settings only Wi-Fi 3 to 5 minutes
Default settings + apps Wi-Fi 10 to 15 minutes
Default settings + remove pre-installed apps (CleanPC) Wi-Fi 60 minutes
Default settings + other settings (Not CleanPC) Wi-Fi 5 minutes

Next steps

Learn more about setting up devices with the Set up School PCs app.

When you're ready to create and apply your provisioning package, see Use Set up School PCs app.