Edit

Update windows10GeneralConfiguration

  • Article

Namespace: microsoft.graph

Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

Update the properties of a windows10GeneralConfiguration object.

This API is available in the following national cloud deployments.

Global service US Government L4 US Government L5 (DOD) China operated by 21Vianet
✅ ✅ ✅ ✅

Permissions

One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.

Permission type Permissions (from least to most privileged)
Delegated (work or school account) DeviceManagementConfiguration.ReadWrite.All
Delegated (personal Microsoft account) Not supported.
Application DeviceManagementConfiguration.ReadWrite.All

HTTP Request

PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/groupAssignments/{deviceConfigurationGroupAssignmentId}/deviceConfiguration
PATCH /deviceManagement/deviceConfigurations/{deviceConfigurationId}/microsoft.graph.windowsDomainJoinConfiguration/networkAccessConfigurations/{deviceConfigurationId}

Request headers

Header Value
Authorization Bearer {token}. Required. Learn more about authentication and authorization.
Accept application/json

Request body

In the request body, supply a JSON representation for the windows10GeneralConfiguration object.

The following table shows the properties that are required when you create the windows10GeneralConfiguration.

Property Type Description
id String Key of the entity. Inherited from deviceConfiguration
lastModifiedDateTime DateTimeOffset DateTime the object was last modified. Inherited from deviceConfiguration
roleScopeTagIds String collection List of Scope Tags for this Entity instance. Inherited from deviceConfiguration
supportsScopeTags Boolean Indicates whether or not the underlying Device Configuration supports the assignment of scope tags. Assigning to the ScopeTags property is not allowed when this value is false and entities will not be visible to scoped users. This occurs for Legacy policies created in Silverlight and can be resolved by deleting and recreating the policy in the Azure Portal. This property is read-only. Inherited from deviceConfiguration
deviceManagementApplicabilityRuleOsEdition deviceManagementApplicabilityRuleOsEdition The OS edition applicability for this Policy. Inherited from deviceConfiguration
deviceManagementApplicabilityRuleOsVersion deviceManagementApplicabilityRuleOsVersion The OS version applicability rule for this Policy. Inherited from deviceConfiguration
deviceManagementApplicabilityRuleDeviceMode deviceManagementApplicabilityRuleDeviceMode The device mode applicability rule for this Policy. Inherited from deviceConfiguration
createdDateTime DateTimeOffset DateTime the object was created. Inherited from deviceConfiguration
description String Admin provided description of the Device Configuration. Inherited from deviceConfiguration
displayName String Admin provided name of the device configuration. Inherited from deviceConfiguration
version Int32 Version of the device configuration. Inherited from deviceConfiguration
taskManagerBlockEndTask Boolean Specify whether non-administrators can use Task Manager to end tasks.
energySaverOnBatteryThresholdPercentage Int32 This setting allows you to specify battery charge level at which Energy Saver is turned on. While on battery, Energy Saver is automatically turned on at (and below) the specified battery charge level. Valid input range (0-100). Valid values 0 to 100
energySaverPluggedInThresholdPercentage Int32 This setting allows you to specify battery charge level at which Energy Saver is turned on. While plugged in, Energy Saver is automatically turned on at (and below) the specified battery charge level. Valid input range (0-100). Valid values 0 to 100
powerLidCloseActionOnBattery powerActionType This setting specifies the action that Windows takes when a user closes the lid on a mobile PC while on battery. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown.
powerLidCloseActionPluggedIn powerActionType This setting specifies the action that Windows takes when a user closes the lid on a mobile PC while plugged in. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown.
powerButtonActionOnBattery powerActionType This setting specifies the action that Windows takes when a user presses the Power button while on battery. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown.
powerButtonActionPluggedIn powerActionType This setting specifies the action that Windows takes when a user presses the Power button while plugged in. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown.
powerSleepButtonActionOnBattery powerActionType This setting specifies the action that Windows takes when a user presses the Sleep button while on battery. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown.
powerSleepButtonActionPluggedIn powerActionType This setting specifies the action that Windows takes when a user presses the Sleep button while plugged in. Possible values are: notConfigured, noAction, sleep, hibernate, shutdown.
powerHybridSleepOnBattery enablement This setting allows you to turn off hybrid sleep while on battery. If you set this setting to disable, a hiberfile is not generated when the system transitions to sleep (Stand By). If you set this setting to enable or do not configure this policy setting, users control this setting. Possible values are: notConfigured, enabled, disabled.
powerHybridSleepPluggedIn enablement This setting allows you to turn off hybrid sleep while plugged in. If you set this setting to disable, a hiberfile is not generated when the system transitions to sleep (Stand By). If you set this setting to enable or do not configure this policy setting, users control this setting. Possible values are: notConfigured, enabled, disabled.
windows10AppsForceUpdateSchedule windows10AppsForceUpdateSchedule Windows 10 force update schedule for Apps.
enableAutomaticRedeployment Boolean Allow users with administrative rights to delete all user data and settings using CTRL + Win + R at the device lock screen so that the device can be automatically re-configured and re-enrolled into management.
microsoftAccountSignInAssistantSettings signInAssistantOptions Controls the Microsoft Account Sign-In Assistant (wlidsvc) NT service. Possible values are: notConfigured, disabled.
authenticationAllowSecondaryDevice Boolean Allows secondary authentication devices to work with Windows.
authenticationWebSignIn enablement Indicates whether or not Web Credential Provider will be enabled. Possible values are: notConfigured, enabled, disabled.
authenticationPreferredAzureADTenantDomainName String Specifies the preferred domain among available domains in the Azure AD tenant.
cryptographyAllowFipsAlgorithmPolicy Boolean Specify whether to allow or disallow the Federal Information Processing Standard (FIPS) policy.
displayAppListWithGdiDPIScalingTurnedOn String collection List of legacy applications that have GDI DPI Scaling turned on.
displayAppListWithGdiDPIScalingTurnedOff String collection List of legacy applications that have GDI DPI Scaling turned off.
enterpriseCloudPrintDiscoveryEndPoint String Endpoint for discovering cloud printers.
enterpriseCloudPrintOAuthAuthority String Authentication endpoint for acquiring OAuth tokens.
enterpriseCloudPrintOAuthClientIdentifier String GUID of a client application authorized to retrieve OAuth tokens from the OAuth Authority.
enterpriseCloudPrintResourceIdentifier String OAuth resource URI for print service as configured in the Azure portal.
enterpriseCloudPrintDiscoveryMaxLimit Int32 Maximum number of printers that should be queried from a discovery endpoint. This is a mobile only setting. Valid values 1 to 65535
enterpriseCloudPrintMopriaDiscoveryResourceIdentifier String OAuth resource URI for printer discovery service as configured in Azure portal.
experienceDoNotSyncBrowserSettings browserSyncSetting Allow or prevent the syncing of Microsoft Edge Browser settings. Option for IT admins to prevent syncing across devices, but allow user override. Possible values are: notConfigured, blockedWithUserOverride, blocked.
messagingBlockSync Boolean Indicates whether or not to block text message back up and restore and Messaging Everywhere.
messagingBlockMMS Boolean Indicates whether or not to block the MMS send/receive functionality on the device.
messagingBlockRichCommunicationServices Boolean Indicates whether or not to block the RCS send/receive functionality on the device.
printerNames String collection Automatically provision printers based on their names (network host names).
printerDefaultName String Name (network host name) of an installed printer.
printerBlockAddition Boolean Prevent user installation of additional printers from printers settings.
searchBlockDiacritics Boolean Specifies if search can use diacritics.
searchDisableAutoLanguageDetection Boolean Specifies whether to use automatic language detection when indexing content and properties.
searchDisableIndexingEncryptedItems Boolean Indicates whether or not to block indexing of WIP-protected items to prevent them from appearing in search results for Cortana or Explorer.
searchEnableRemoteQueries Boolean Indicates whether or not to block remote queries of this computer’s index.
searchDisableUseLocation Boolean Specifies if search can use location information.
searchDisableLocation Boolean Specifies if search can use location information.
searchDisableIndexerBackoff Boolean Indicates whether or not to disable the search indexer backoff feature.
searchDisableIndexingRemovableDrive Boolean Indicates whether or not to allow users to add locations on removable drives to libraries and to be indexed.
searchEnableAutomaticIndexSizeManangement Boolean Specifies minimum amount of hard drive space on the same drive as the index location before indexing stops.
searchBlockWebResults Boolean Indicates whether or not to block the web search.
findMyFiles enablement Controls if the user can configure search to Find My Files mode, which searches files in secondary hard drives and also outside of the user profile. Find My Files does not allow users to search files or locations to which they do not have access. Possible values are: notConfigured, enabled, disabled.
securityBlockAzureADJoinedDevicesAutoEncryption Boolean Specify whether to allow automatic device encryption during OOBE when the device is Azure AD joined (desktop only).
diagnosticsDataSubmissionMode diagnosticDataSubmissionMode Gets or sets a value allowing the device to send diagnostic and usage telemetry data, such as Watson. Possible values are: userDefined, none, basic, enhanced, full.
oneDriveDisableFileSync Boolean Gets or sets a value allowing IT admins to prevent apps and features from working with files on OneDrive.
systemTelemetryProxyServer String Gets or sets the fully qualified domain name (FQDN) or IP address of a proxy server to forward Connected User Experiences and Telemetry requests.
edgeTelemetryForMicrosoft365Analytics edgeTelemetryMode Specifies what type of telemetry data (none, intranet, internet, both) is sent to Microsoft 365 Analytics. Possible values are: notConfigured, intranet, internet, intranetAndInternet.
inkWorkspaceAccess inkAccessSetting Controls the user access to the ink workspace, from the desktop and from above the lock screen. Possible values are: notConfigured, enabled, disabled.
inkWorkspaceAccessState stateManagementSetting Controls the user access to the ink workspace, from the desktop and from above the lock screen. Possible values are: notConfigured, blocked, allowed.
inkWorkspaceBlockSuggestedApps Boolean Specify whether to show recommended app suggestions in the ink workspace.
smartScreenEnableAppInstallControl Boolean This property will be deprecated in July 2019 and will be replaced by property SmartScreenAppInstallControl. Allows IT Admins to control whether users are allowed to install apps from places other than the Store.
smartScreenAppInstallControl appInstallControlType Added in Windows 10, version 1703. Allows IT Admins to control whether users are allowed to install apps from places other than the Store. Possible values are: notConfigured, anywhere, storeOnly, recommendations, preferStore.
personalizationDesktopImageUrl String A http or https Url to a jpg, jpeg or png image that needs to be downloaded and used as the Desktop Image or a file Url to a local image on the file system that needs to used as the Desktop Image.
personalizationLockScreenImageUrl String A http or https Url to a jpg, jpeg or png image that neeeds to be downloaded and used as the Lock Screen Image or a file Url to a local image on the file system that needs to be used as the Lock Screen Image.
bluetoothAllowedServices String collection Specify a list of allowed Bluetooth services and profiles in hex formatted strings.
bluetoothBlockAdvertising Boolean Whether or not to Block the user from using bluetooth advertising.
bluetoothBlockPromptedProximalConnections Boolean Whether or not to block the users from using Swift Pair and other proximity based scenarios.
bluetoothBlockDiscoverableMode Boolean Whether or not to Block the user from using bluetooth discoverable mode.
bluetoothBlockPrePairing Boolean Whether or not to block specific bundled Bluetooth peripherals to automatically pair with the host device.
edgeBlockAutofill Boolean Indicates whether or not to block auto fill.
edgeBlocked Boolean Indicates whether or not to Block the user from using the Edge browser.
edgeCookiePolicy edgeCookiePolicy Indicates which cookies to block in the Edge browser. Possible values are: userDefined, allow, blockThirdParty, blockAll.
edgeBlockDeveloperTools Boolean Indicates whether or not to block developer tools in the Edge browser.
edgeBlockSendingDoNotTrackHeader Boolean Indicates whether or not to Block the user from sending the do not track header.
edgeBlockExtensions Boolean Indicates whether or not to block extensions in the Edge browser.
edgeBlockInPrivateBrowsing Boolean Indicates whether or not to block InPrivate browsing on corporate networks, in the Edge browser.
edgeBlockJavaScript Boolean Indicates whether or not to Block the user from using JavaScript.
edgeBlockPasswordManager Boolean Indicates whether or not to Block password manager.
edgeBlockAddressBarDropdown Boolean Block the address bar dropdown functionality in Microsoft Edge. Disable this settings to minimize network connections from Microsoft Edge to Microsoft services.
edgeBlockCompatibilityList Boolean Block Microsoft compatibility list in Microsoft Edge. This list from Microsoft helps Edge properly display sites with known compatibility issues.
edgeClearBrowsingDataOnExit Boolean Clear browsing data on exiting Microsoft Edge.
edgeAllowStartPagesModification Boolean Allow users to change Start pages on Edge. Use the EdgeHomepageUrls to specify the Start pages that the user would see by default when they open Edge.
edgeDisableFirstRunPage Boolean Block the Microsoft web page that opens on the first use of Microsoft Edge. This policy allows enterprises, like those enrolled in zero emissions configurations, to block this page.
edgeBlockLiveTileDataCollection Boolean Block the collection of information by Microsoft for live tile creation when users pin a site to Start from Microsoft Edge.
edgeSyncFavoritesWithInternetExplorer Boolean Enable favorites sync between Internet Explorer and Microsoft Edge. Additions, deletions, modifications and order changes to favorites are shared between browsers.
edgeFavoritesListLocation String The location of the favorites list to provision. Could be a local file, local network or http location.
edgeBlockEditFavorites Boolean Indicates whether or not to Block the user from making changes to Favorites.
edgeNewTabPageURL String Specify the page opened when new tabs are created.
edgeHomeButtonConfiguration edgeHomeButtonConfiguration Causes the Home button to either hide, load the default Start page, load a New tab page, or a custom URL
edgeHomeButtonConfigurationEnabled Boolean Enable the Home button configuration.
edgeOpensWith edgeOpenOptions Specify what kind of pages are open at start. Possible values are: notConfigured, startPage, newTabPage, previousPages, specificPages.
edgeBlockSideloadingExtensions Boolean Indicates whether the user can sideload extensions.
edgeRequiredExtensionPackageFamilyNames String collection Specify the list of package family names of browser extensions that are required and cannot be turned off by the user.
edgeBlockPrinting Boolean Configure Edge to allow or block printing.
edgeFavoritesBarVisibility visibilitySetting Get or set a value that specifies whether to set the favorites bar to always be visible or hidden on any page. Possible values are: notConfigured, hide, show.
edgeBlockSavingHistory Boolean Configure Edge to allow browsing history to be saved or to never save browsing history.
edgeBlockFullScreenMode Boolean Allow or prevent Edge from entering the full screen mode.
edgeBlockWebContentOnNewTabPage Boolean Configure to load a blank page in Edge instead of the default New tab page and prevent users from changing it.
edgeBlockTabPreloading Boolean Configure whether Edge preloads the new tab page at Windows startup.
edgeBlockPrelaunch Boolean Decide whether Microsoft Edge is prelaunched at Windows startup.
edgeShowMessageWhenOpeningInternetExplorerSites internetExplorerMessageSetting Controls the message displayed by Edge before switching to Internet Explorer. Possible values are: notConfigured, disabled, enabled, keepGoing.
edgePreventCertificateErrorOverride Boolean Allow or prevent users from overriding certificate errors.
edgeKioskModeRestriction edgeKioskModeRestrictionType Controls how the Microsoft Edge settings are restricted based on the configure kiosk mode. Possible values are: notConfigured, digitalSignage, normalMode, publicBrowsingSingleApp, publicBrowsingMultiApp.
edgeKioskResetAfterIdleTimeInMinutes Int32 Specifies the time in minutes from the last user activity before Microsoft Edge kiosk resets. Valid values are 0-1440. The default is 5. 0 indicates no reset. Valid values 0 to 1440
cellularBlockDataWhenRoaming Boolean Whether or not to Block the user from using data over cellular while roaming.
cellularBlockVpn Boolean Whether or not to Block the user from using VPN over cellular.
cellularBlockVpnWhenRoaming Boolean Whether or not to Block the user from using VPN when roaming over cellular.
cellularData configurationUsage Whether or not to allow the cellular data channel on the device. If not configured, the cellular data channel is allowed and the user can turn it off. Possible values are: blocked, required, allowed, notConfigured.
defenderRequireRealTimeMonitoring Boolean Indicates whether or not to require real time monitoring.
defenderRequireBehaviorMonitoring Boolean Indicates whether or not to require behavior monitoring.
defenderRequireNetworkInspectionSystem Boolean Indicates whether or not to require network inspection system.
defenderScanDownloads Boolean Indicates whether or not to scan downloads.
defenderScheduleScanEnableLowCpuPriority Boolean When enabled, low CPU priority will be used during scheduled scans.
defenderDisableCatchupQuickScan Boolean When blocked, catch-up scans for scheduled quick scans will be turned off.
defenderDisableCatchupFullScan Boolean When blocked, catch-up scans for scheduled full scans will be turned off.
defenderScanScriptsLoadedInInternetExplorer Boolean Indicates whether or not to scan scripts loaded in Internet Explorer browser.
defenderBlockEndUserAccess Boolean Whether or not to block end user access to Defender.
defenderSignatureUpdateIntervalInHours Int32 The signature update interval in hours. Specify 0 not to check. Valid values 0 to 24
defenderMonitorFileActivity defenderMonitorFileActivity Value for monitoring file activity. Possible values are: userDefined, disable, monitorAllFiles, monitorIncomingFilesOnly, monitorOutgoingFilesOnly.
defenderDaysBeforeDeletingQuarantinedMalware Int32 Number of days before deleting quarantined malware. Valid values 0 to 90
defenderScanMaxCpu Int32 Max CPU usage percentage during scan. Valid values 0 to 100
defenderScanArchiveFiles Boolean Indicates whether or not to scan archive files.
defenderScanIncomingMail Boolean Indicates whether or not to scan incoming mail messages.
defenderScanRemovableDrivesDuringFullScan Boolean Indicates whether or not to scan removable drives during full scan.
defenderScanMappedNetworkDrivesDuringFullScan Boolean Indicates whether or not to scan mapped network drives during full scan.
defenderScanNetworkFiles Boolean Indicates whether or not to scan files opened from a network folder.
defenderRequireCloudProtection Boolean Indicates whether or not to require cloud protection.
defenderCloudBlockLevel defenderCloudBlockLevelType Specifies the level of cloud-delivered protection. Possible values are: notConfigured, high, highPlus, zeroTolerance.
defenderCloudExtendedTimeout Int32 Timeout extension for file scanning by the cloud. Valid values 0 to 50
defenderCloudExtendedTimeoutInSeconds Int32 Timeout extension for file scanning by the cloud. Valid values 0 to 50
defenderPromptForSampleSubmission defenderPromptForSampleSubmission The configuration for how to prompt user for sample submission. Possible values are: userDefined, alwaysPrompt, promptBeforeSendingPersonalData, neverSendData, sendAllDataWithoutPrompting.
defenderScheduledQuickScanTime TimeOfDay The time to perform a daily quick scan.
defenderScanType defenderScanType The defender system scan type. Possible values are: userDefined, disabled, quick, full.
defenderSystemScanSchedule weeklySchedule Defender day of the week for the system scan. Possible values are: userDefined, everyday, sunday, monday, tuesday, wednesday, thursday, friday, saturday, noScheduledScan.
defenderScheduledScanTime TimeOfDay The defender time for the system scan.
defenderPotentiallyUnwantedAppAction defenderPotentiallyUnwantedAppAction Gets or sets Defender’s action to take on Potentially Unwanted Application (PUA), which includes software with behaviors of ad-injection, software bundling, persistent solicitation for payment or subscription, etc. Defender alerts user when PUA is being downloaded or attempts to install itself. Added in Windows 10 for desktop. Possible values are: deviceDefault, block, audit.
defenderPotentiallyUnwantedAppActionSetting defenderProtectionType Gets or sets Defender’s action to take on Potentially Unwanted Application (PUA), which includes software with behaviors of ad-injection, software bundling, persistent solicitation for payment or subscription, etc. Defender alerts user when PUA is being downloaded or attempts to install itself. Added in Windows 10 for desktop. Possible values are: userDefined, enable, auditMode, warn, notConfigured.
defenderSubmitSamplesConsentType defenderSubmitSamplesConsentType Checks for the user consent level in Windows Defender to send data. Possible values are: sendSafeSamplesAutomatically, alwaysPrompt, neverSend, sendAllSamplesAutomatically.
defenderBlockOnAccessProtection Boolean Allows or disallows Windows Defender On Access Protection functionality.
defenderDetectedMalwareActions defenderDetectedMalwareActions Gets or sets Defender’s actions to take on detected Malware per threat level.
defenderFileExtensionsToExclude String collection File extensions to exclude from scans and real time protection.
defenderFilesAndFoldersToExclude String collection Files and folder to exclude from scans and real time protection.
defenderProcessesToExclude String collection Processes to exclude from scans and real time protection.
lockScreenAllowTimeoutConfiguration Boolean Specify whether to show a user-configurable setting to control the screen timeout while on the lock screen of Windows 10 Mobile devices. If this policy is set to Allow, the value set by lockScreenTimeoutInSeconds is ignored.
lockScreenBlockActionCenterNotifications Boolean Indicates whether or not to block action center notifications over lock screen.
lockScreenBlockCortana Boolean Indicates whether or not the user can interact with Cortana using speech while the system is locked.
lockScreenBlockToastNotifications Boolean Indicates whether to allow toast notifications above the device lock screen.
lockScreenTimeoutInSeconds Int32 Set the duration (in seconds) from the screen locking to the screen turning off for Windows 10 Mobile devices. Supported values are 11-1800. Valid values 11 to 1800
lockScreenActivateAppsWithVoice enablement This policy setting specifies whether Windows apps can be activated by voice while the system is locked. Possible values are: notConfigured, enabled, disabled.
passwordBlockSimple Boolean Specify whether PINs or passwords such as "1111" or "1234" are allowed. For Windows 10 desktops, it also controls the use of picture passwords.
passwordExpirationDays Int32 The password expiration in days. Valid values 0 to 730
passwordMinimumLength Int32 The minimum password length. Valid values 4 to 16
passwordMinutesOfInactivityBeforeScreenTimeout Int32 The minutes of inactivity before the screen times out.
passwordMinimumCharacterSetCount Int32 The number of character sets required in the password.
passwordPreviousPasswordBlockCount Int32 The number of previous passwords to prevent reuse of. Valid values 0 to 50
passwordRequired Boolean Indicates whether or not to require the user to have a password.
passwordRequireWhenResumeFromIdleState Boolean Indicates whether or not to require a password upon resuming from an idle state.
passwordRequiredType requiredPasswordType The required password type. Possible values are: deviceDefault, alphanumeric, numeric.
passwordSignInFailureCountBeforeFactoryReset Int32 The number of sign in failures before factory reset. Valid values 0 to 999
passwordMinimumAgeInDays Int32 This security setting determines the period of time (in days) that a password must be used before the user can change it. Valid values 0 to 998
privacyAdvertisingId stateManagementSetting Enables or disables the use of advertising ID. Added in Windows 10, version 1607. Possible values are: notConfigured, blocked, allowed.
privacyAutoAcceptPairingAndConsentPrompts Boolean Indicates whether or not to allow the automatic acceptance of the pairing and privacy user consent dialog when launching apps.
privacyDisableLaunchExperience Boolean This policy prevents the privacy experience from launching during user logon for new and upgraded users.​
privacyBlockInputPersonalization Boolean Indicates whether or not to block the usage of cloud based speech services for Cortana, Dictation, or Store applications.
privacyBlockPublishUserActivities Boolean Blocks the shared experiences/discovery of recently used resources in task switcher etc.
privacyBlockActivityFeed Boolean Blocks the usage of cloud based speech services for Cortana, Dictation, or Store applications.
activateAppsWithVoice enablement Specifies if Windows apps can be activated by voice. Possible values are: notConfigured, enabled, disabled.
startBlockUnpinningAppsFromTaskbar Boolean Indicates whether or not to block the user from unpinning apps from taskbar.
startMenuAppListVisibility windowsStartMenuAppListVisibilityType Setting the value of this collapses the app list, removes the app list entirely, or disables the corresponding toggle in the Settings app. Possible values are: userDefined, collapse, remove, disableSettingsApp.
startMenuHideChangeAccountSettings Boolean Enabling this policy hides the change account setting from appearing in the user tile in the start menu.
startMenuHideFrequentlyUsedApps Boolean Enabling this policy hides the most used apps from appearing on the start menu and disables the corresponding toggle in the Settings app.
startMenuHideHibernate Boolean Enabling this policy hides hibernate from appearing in the power button in the start menu.
startMenuHideLock Boolean Enabling this policy hides lock from appearing in the user tile in the start menu.
startMenuHidePowerButton Boolean Enabling this policy hides the power button from appearing in the start menu.
startMenuHideRecentJumpLists Boolean Enabling this policy hides recent jump lists from appearing on the start menu/taskbar and disables the corresponding toggle in the Settings app.
startMenuHideRecentlyAddedApps Boolean Enabling this policy hides recently added apps from appearing on the start menu and disables the corresponding toggle in the Settings app.
startMenuHideRestartOptions Boolean Enabling this policy hides “Restart/Update and Restart” from appearing in the power button in the start menu.
startMenuHideShutDown Boolean Enabling this policy hides shut down/update and shut down from appearing in the power button in the start menu.
startMenuHideSignOut Boolean Enabling this policy hides sign out from appearing in the user tile in the start menu.
startMenuHideSleep Boolean Enabling this policy hides sleep from appearing in the power button in the start menu.
startMenuHideSwitchAccount Boolean Enabling this policy hides switch account from appearing in the user tile in the start menu.
startMenuHideUserTile Boolean Enabling this policy hides the user tile from appearing in the start menu.
startMenuLayoutEdgeAssetsXml Binary This policy setting allows you to import Edge assets to be used with startMenuLayoutXml policy. Start layout can contain secondary tile from Edge app which looks for Edge local asset file. Edge local asset would not exist and cause Edge secondary tile to appear empty in this case. This policy only gets applied when startMenuLayoutXml policy is modified. The value should be a UTF-8 Base64 encoded byte array.
startMenuLayoutXml Binary Allows admins to override the default Start menu layout and prevents the user from changing it. The layout is modified by specifying an XML file based on a layout modification schema. XML needs to be in a UTF8 encoded byte array format.
startMenuMode windowsStartMenuModeType Allows admins to decide how the Start menu is displayed. Possible values are: userDefined, fullScreen, nonFullScreen.
startMenuPinnedFolderDocuments visibilitySetting Enforces the visibility (Show/Hide) of the Documents folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.
startMenuPinnedFolderDownloads visibilitySetting Enforces the visibility (Show/Hide) of the Downloads folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.
startMenuPinnedFolderFileExplorer visibilitySetting Enforces the visibility (Show/Hide) of the FileExplorer shortcut on the Start menu. Possible values are: notConfigured, hide, show.
startMenuPinnedFolderHomeGroup visibilitySetting Enforces the visibility (Show/Hide) of the HomeGroup folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.
startMenuPinnedFolderMusic visibilitySetting Enforces the visibility (Show/Hide) of the Music folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.
startMenuPinnedFolderNetwork visibilitySetting Enforces the visibility (Show/Hide) of the Network folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.
startMenuPinnedFolderPersonalFolder visibilitySetting Enforces the visibility (Show/Hide) of the PersonalFolder shortcut on the Start menu. Possible values are: notConfigured, hide, show.
startMenuPinnedFolderPictures visibilitySetting Enforces the visibility (Show/Hide) of the Pictures folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.
startMenuPinnedFolderSettings visibilitySetting Enforces the visibility (Show/Hide) of the Settings folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.
startMenuPinnedFolderVideos visibilitySetting Enforces the visibility (Show/Hide) of the Videos folder shortcut on the Start menu. Possible values are: notConfigured, hide, show.
settingsBlockSettingsApp Boolean Indicates whether or not to block access to Settings app.
settingsBlockSystemPage Boolean Indicates whether or not to block access to System in Settings app.
settingsBlockDevicesPage Boolean Indicates whether or not to block access to Devices in Settings app.
settingsBlockNetworkInternetPage Boolean Indicates whether or not to block access to Network & Internet in Settings app.
settingsBlockPersonalizationPage Boolean Indicates whether or not to block access to Personalization in Settings app.
settingsBlockAccountsPage Boolean Indicates whether or not to block access to Accounts in Settings app.
settingsBlockTimeLanguagePage Boolean Indicates whether or not to block access to Time & Language in Settings app.
settingsBlockEaseOfAccessPage Boolean Indicates whether or not to block access to Ease of Access in Settings app.
settingsBlockPrivacyPage Boolean Indicates whether or not to block access to Privacy in Settings app.
settingsBlockUpdateSecurityPage Boolean Indicates whether or not to block access to Update & Security in Settings app.
settingsBlockAppsPage Boolean Indicates whether or not to block access to Apps in Settings app.
settingsBlockGamingPage Boolean Indicates whether or not to block access to Gaming in Settings app.
windowsSpotlightBlockConsumerSpecificFeatures Boolean Allows IT admins to block experiences that are typically for consumers only, such as Start suggestions, Membership notifications, Post-OOBE app install and redirect tiles.
windowsSpotlightBlocked Boolean Allows IT admins to turn off all Windows Spotlight features
windowsSpotlightBlockOnActionCenter Boolean Block suggestions from Microsoft that show after each OS clean install, upgrade or in an on-going basis to introduce users to what is new or changed
windowsSpotlightBlockTailoredExperiences Boolean Block personalized content in Windows spotlight based on user’s device usage.
windowsSpotlightBlockThirdPartyNotifications Boolean Block third party content delivered via Windows Spotlight
windowsSpotlightBlockWelcomeExperience Boolean Block Windows Spotlight Windows welcome experience
windowsSpotlightBlockWindowsTips Boolean Allows IT admins to turn off the popup of Windows Tips.
windowsSpotlightConfigureOnLockScreen windowsSpotlightEnablementSettings Specifies the type of Spotlight. Possible values are: notConfigured, disabled, enabled.
networkProxyApplySettingsDeviceWide Boolean If set, proxy settings will be applied to all processes and accounts in the device. Otherwise, it will be applied to the user account that’s enrolled into MDM.
networkProxyDisableAutoDetect Boolean Disable automatic detection of settings. If enabled, the system will try to find the path to a proxy auto-config (PAC) script.
networkProxyAutomaticConfigurationUrl String Address to the proxy auto-config (PAC) script you want to use.
networkProxyServer windows10NetworkProxyServer Specifies manual proxy server settings.
accountsBlockAddingNonMicrosoftAccountEmail Boolean Indicates whether or not to Block the user from adding email accounts to the device that are not associated with a Microsoft account.
antiTheftModeBlocked Boolean Indicates whether or not to block the user from selecting an AntiTheft mode preference (Windows 10 Mobile only).
bluetoothBlocked Boolean Whether or not to Block the user from using bluetooth.
cameraBlocked Boolean Whether or not to Block the user from accessing the camera of the device.
connectedDevicesServiceBlocked Boolean Whether or not to block Connected Devices Service which enables discovery and connection to other devices, remote messaging, remote app sessions and other cross-device experiences.
certificatesBlockManualRootCertificateInstallation Boolean Whether or not to Block the user from doing manual root certificate installation.
copyPasteBlocked Boolean Whether or not to Block the user from using copy paste.
cortanaBlocked Boolean Whether or not to Block the user from using Cortana.
deviceManagementBlockFactoryResetOnMobile Boolean Indicates whether or not to Block the user from resetting their phone.
deviceManagementBlockManualUnenroll Boolean Indicates whether or not to Block the user from doing manual un-enrollment from device management.
safeSearchFilter safeSearchFilterType Specifies what filter level of safe search is required. Possible values are: userDefined, strict, moderate.
edgeBlockPopups Boolean Indicates whether or not to block popups.
edgeBlockSearchSuggestions Boolean Indicates whether or not to block the user from using the search suggestions in the address bar.
edgeBlockSearchEngineCustomization Boolean Indicates whether or not to block the user from adding new search engine or changing the default search engine.
edgeBlockSendingIntranetTrafficToInternetExplorer Boolean Indicates whether or not to switch the intranet traffic from Edge to Internet Explorer. Note: the name of this property is misleading; the property is obsolete, use EdgeSendIntranetTrafficToInternetExplorer instead.
edgeSendIntranetTrafficToInternetExplorer Boolean Indicates whether or not to switch the intranet traffic from Edge to Internet Explorer.
edgeRequireSmartScreen Boolean Indicates whether or not to Require the user to use the smart screen filter.
edgeEnterpriseModeSiteListLocation String Indicates the enterprise mode site list location. Could be a local file, local network or http location.
edgeFirstRunUrl String The first run URL for when Edge browser is opened for the first time.
edgeSearchEngine edgeSearchEngineBase Allows IT admins to set a default search engine for MDM-Controlled devices. Users can override this and change their default search engine provided the AllowSearchEngineCustomization policy is not set.
edgeHomepageUrls String collection The list of URLs for homepages shodwn on MDM-enrolled devices on Edge browser.
edgeBlockAccessToAboutFlags Boolean Indicates whether or not to prevent access to about flags on Edge browser.
smartScreenBlockPromptOverride Boolean Indicates whether or not users can override SmartScreen Filter warnings about potentially malicious websites.
smartScreenBlockPromptOverrideForFiles Boolean Indicates whether or not users can override the SmartScreen Filter warnings about downloading unverified files
webRtcBlockLocalhostIpAddress Boolean Indicates whether or not user's localhost IP address is displayed while making phone calls using the WebRTC
internetSharingBlocked Boolean Indicates whether or not to Block the user from using internet sharing.
settingsBlockAddProvisioningPackage Boolean Indicates whether or not to block the user from installing provisioning packages.
settingsBlockRemoveProvisioningPackage Boolean Indicates whether or not to block the runtime configuration agent from removing provisioning packages.
settingsBlockChangeSystemTime Boolean Indicates whether or not to block the user from changing date and time settings.
settingsBlockEditDeviceName Boolean Indicates whether or not to block the user from editing the device name.
settingsBlockChangeRegion Boolean Indicates whether or not to block the user from changing the region settings.
settingsBlockChangeLanguage Boolean Indicates whether or not to block the user from changing the language settings.
settingsBlockChangePowerSleep Boolean Indicates whether or not to block the user from changing power and sleep settings.
locationServicesBlocked Boolean Indicates whether or not to Block the user from location services.
microsoftAccountBlocked Boolean Indicates whether or not to Block a Microsoft account.
microsoftAccountBlockSettingsSync Boolean Indicates whether or not to Block Microsoft account settings sync.
nfcBlocked Boolean Indicates whether or not to Block the user from using near field communication.
resetProtectionModeBlocked Boolean Indicates whether or not to Block the user from reset protection mode.
screenCaptureBlocked Boolean Indicates whether or not to Block the user from taking Screenshots.
storageBlockRemovableStorage Boolean Indicates whether or not to Block the user from using removable storage.
storageRequireMobileDeviceEncryption Boolean Indicating whether or not to require encryption on a mobile device.
usbBlocked Boolean Indicates whether or not to Block the user from USB connection.
voiceRecordingBlocked Boolean Indicates whether or not to Block the user from voice recording.
wiFiBlockAutomaticConnectHotspots Boolean Indicating whether or not to block automatically connecting to Wi-Fi hotspots. Has no impact if Wi-Fi is blocked.
wiFiBlocked Boolean Indicates whether or not to Block the user from using Wi-Fi.
wiFiBlockManualConfiguration Boolean Indicates whether or not to Block the user from using Wi-Fi manual configuration.
wiFiScanInterval Int32 Specify how often devices scan for Wi-Fi networks. Supported values are 1-500, where 100 = default, and 500 = low frequency. Valid values 1 to 500
wirelessDisplayBlockProjectionToThisDevice Boolean Indicates whether or not to allow other devices from discovering this PC for projection.
wirelessDisplayBlockUserInputFromReceiver Boolean Indicates whether or not to allow user input from wireless display receiver.
wirelessDisplayRequirePinForPairing Boolean Indicates whether or not to require a PIN for new devices to initiate pairing.
windowsStoreBlocked Boolean Indicates whether or not to Block the user from using the Windows store.
appsAllowTrustedAppsSideloading stateManagementSetting Indicates whether apps from AppX packages signed with a trusted certificate can be side loaded. Possible values are: notConfigured, blocked, allowed.
windowsStoreBlockAutoUpdate Boolean Indicates whether or not to block automatic update of apps from Windows Store.
developerUnlockSetting stateManagementSetting Indicates whether or not to allow developer unlock. Possible values are: notConfigured, blocked, allowed.
sharedUserAppDataAllowed Boolean Indicates whether or not to block multiple users of the same app to share data.
appsBlockWindowsStoreOriginatedApps Boolean Indicates whether or not to disable the launch of all apps from Windows Store that came pre-installed or were downloaded.
windowsStoreEnablePrivateStoreOnly Boolean Indicates whether or not to enable Private Store Only.
storageRestrictAppDataToSystemVolume Boolean Indicates whether application data is restricted to the system drive.
storageRestrictAppInstallToSystemVolume Boolean Indicates whether the installation of applications is restricted to the system drive.
gameDvrBlocked Boolean Indicates whether or not to block DVR and broadcasting.
experienceBlockDeviceDiscovery Boolean Indicates whether or not to enable device discovery UX.
experienceBlockErrorDialogWhenNoSIM Boolean Indicates whether or not to allow the error dialog from displaying if no SIM card is detected.
experienceBlockTaskSwitcher Boolean Indicates whether or not to enable task switching on the device.
logonBlockFastUserSwitching Boolean Disables the ability to quickly switch between users that are logged on simultaneously without logging off.
tenantLockdownRequireNetworkDuringOutOfBoxExperience Boolean Whether the device is required to connect to the network.
appManagementMSIAllowUserControlOverInstall Boolean This policy setting permits users to change installation options that typically are available only to system administrators.
appManagementMSIAlwaysInstallWithElevatedPrivileges Boolean This policy setting directs Windows Installer to use elevated permissions when it installs any program on the system.
dataProtectionBlockDirectMemoryAccess Boolean This policy setting allows you to block direct memory access (DMA) for all hot pluggable PCI downstream ports until a user logs into Windows.
appManagementPackageFamilyNamesToLaunchAfterLogOn String collection List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are to be launched after logon.​
uninstallBuiltInApps Boolean Indicates whether or not to uninstall a fixed list of built-in Windows apps.
configureTimeZone String Specifies the time zone to be applied to the device. This is the standard Windows name for the target time zone.

Response

If successful, this method returns a 200 OK response code and an updated windows10GeneralConfiguration object in the response body.

Example

Request

Here is an example of the request.

PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{deviceConfigurationId}
Content-type: application/json
Content-length: 15009

{
  "@odata.type": "#microsoft.graph.windows10GeneralConfiguration",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "deviceManagementApplicabilityRuleOsEdition": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
    "osEditionTypes": [
      "windows10EnterpriseN"
    ],
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleOsVersion": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
    "minOSVersion": "Min OSVersion value",
    "maxOSVersion": "Max OSVersion value",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleDeviceMode": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
    "deviceMode": "sModeConfiguration",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "taskManagerBlockEndTask": true,
  "energySaverOnBatteryThresholdPercentage": 7,
  "energySaverPluggedInThresholdPercentage": 7,
  "powerLidCloseActionOnBattery": "noAction",
  "powerLidCloseActionPluggedIn": "noAction",
  "powerButtonActionOnBattery": "noAction",
  "powerButtonActionPluggedIn": "noAction",
  "powerSleepButtonActionOnBattery": "noAction",
  "powerSleepButtonActionPluggedIn": "noAction",
  "powerHybridSleepOnBattery": "enabled",
  "powerHybridSleepPluggedIn": "enabled",
  "windows10AppsForceUpdateSchedule": {
    "@odata.type": "microsoft.graph.windows10AppsForceUpdateSchedule",
    "startDateTime": "2016-12-31T23:58:46.7156189-08:00",
    "recurrence": "daily",
    "runImmediatelyIfAfterStartDateTime": true
  },
  "enableAutomaticRedeployment": true,
  "microsoftAccountSignInAssistantSettings": "disabled",
  "authenticationAllowSecondaryDevice": true,
  "authenticationWebSignIn": "enabled",
  "authenticationPreferredAzureADTenantDomainName": "Authentication Preferred Azure ADTenant Domain Name value",
  "cryptographyAllowFipsAlgorithmPolicy": true,
  "displayAppListWithGdiDPIScalingTurnedOn": [
    "Display App List With Gdi DPIScaling Turned On value"
  ],
  "displayAppListWithGdiDPIScalingTurnedOff": [
    "Display App List With Gdi DPIScaling Turned Off value"
  ],
  "enterpriseCloudPrintDiscoveryEndPoint": "Enterprise Cloud Print Discovery End Point value",
  "enterpriseCloudPrintOAuthAuthority": "Enterprise Cloud Print OAuth Authority value",
  "enterpriseCloudPrintOAuthClientIdentifier": "Enterprise Cloud Print OAuth Client Identifier value",
  "enterpriseCloudPrintResourceIdentifier": "Enterprise Cloud Print Resource Identifier value",
  "enterpriseCloudPrintDiscoveryMaxLimit": 5,
  "enterpriseCloudPrintMopriaDiscoveryResourceIdentifier": "Enterprise Cloud Print Mopria Discovery Resource Identifier value",
  "experienceDoNotSyncBrowserSettings": "blockedWithUserOverride",
  "messagingBlockSync": true,
  "messagingBlockMMS": true,
  "messagingBlockRichCommunicationServices": true,
  "printerNames": [
    "Printer Names value"
  ],
  "printerDefaultName": "Printer Default Name value",
  "printerBlockAddition": true,
  "searchBlockDiacritics": true,
  "searchDisableAutoLanguageDetection": true,
  "searchDisableIndexingEncryptedItems": true,
  "searchEnableRemoteQueries": true,
  "searchDisableUseLocation": true,
  "searchDisableLocation": true,
  "searchDisableIndexerBackoff": true,
  "searchDisableIndexingRemovableDrive": true,
  "searchEnableAutomaticIndexSizeManangement": true,
  "searchBlockWebResults": true,
  "findMyFiles": "enabled",
  "securityBlockAzureADJoinedDevicesAutoEncryption": true,
  "diagnosticsDataSubmissionMode": "none",
  "oneDriveDisableFileSync": true,
  "systemTelemetryProxyServer": "System Telemetry Proxy Server value",
  "edgeTelemetryForMicrosoft365Analytics": "intranet",
  "inkWorkspaceAccess": "enabled",
  "inkWorkspaceAccessState": "blocked",
  "inkWorkspaceBlockSuggestedApps": true,
  "smartScreenEnableAppInstallControl": true,
  "smartScreenAppInstallControl": "anywhere",
  "personalizationDesktopImageUrl": "https://example.com/personalizationDesktopImageUrl/",
  "personalizationLockScreenImageUrl": "https://example.com/personalizationLockScreenImageUrl/",
  "bluetoothAllowedServices": [
    "Bluetooth Allowed Services value"
  ],
  "bluetoothBlockAdvertising": true,
  "bluetoothBlockPromptedProximalConnections": true,
  "bluetoothBlockDiscoverableMode": true,
  "bluetoothBlockPrePairing": true,
  "edgeBlockAutofill": true,
  "edgeBlocked": true,
  "edgeCookiePolicy": "allow",
  "edgeBlockDeveloperTools": true,
  "edgeBlockSendingDoNotTrackHeader": true,
  "edgeBlockExtensions": true,
  "edgeBlockInPrivateBrowsing": true,
  "edgeBlockJavaScript": true,
  "edgeBlockPasswordManager": true,
  "edgeBlockAddressBarDropdown": true,
  "edgeBlockCompatibilityList": true,
  "edgeClearBrowsingDataOnExit": true,
  "edgeAllowStartPagesModification": true,
  "edgeDisableFirstRunPage": true,
  "edgeBlockLiveTileDataCollection": true,
  "edgeSyncFavoritesWithInternetExplorer": true,
  "edgeFavoritesListLocation": "Edge Favorites List Location value",
  "edgeBlockEditFavorites": true,
  "edgeNewTabPageURL": "Edge New Tab Page URL value",
  "edgeHomeButtonConfiguration": {
    "@odata.type": "microsoft.graph.edgeHomeButtonConfiguration"
  },
  "edgeHomeButtonConfigurationEnabled": true,
  "edgeOpensWith": "startPage",
  "edgeBlockSideloadingExtensions": true,
  "edgeRequiredExtensionPackageFamilyNames": [
    "Edge Required Extension Package Family Names value"
  ],
  "edgeBlockPrinting": true,
  "edgeFavoritesBarVisibility": "hide",
  "edgeBlockSavingHistory": true,
  "edgeBlockFullScreenMode": true,
  "edgeBlockWebContentOnNewTabPage": true,
  "edgeBlockTabPreloading": true,
  "edgeBlockPrelaunch": true,
  "edgeShowMessageWhenOpeningInternetExplorerSites": "disabled",
  "edgePreventCertificateErrorOverride": true,
  "edgeKioskModeRestriction": "digitalSignage",
  "edgeKioskResetAfterIdleTimeInMinutes": 4,
  "cellularBlockDataWhenRoaming": true,
  "cellularBlockVpn": true,
  "cellularBlockVpnWhenRoaming": true,
  "cellularData": "required",
  "defenderRequireRealTimeMonitoring": true,
  "defenderRequireBehaviorMonitoring": true,
  "defenderRequireNetworkInspectionSystem": true,
  "defenderScanDownloads": true,
  "defenderScheduleScanEnableLowCpuPriority": true,
  "defenderDisableCatchupQuickScan": true,
  "defenderDisableCatchupFullScan": true,
  "defenderScanScriptsLoadedInInternetExplorer": true,
  "defenderBlockEndUserAccess": true,
  "defenderSignatureUpdateIntervalInHours": 6,
  "defenderMonitorFileActivity": "disable",
  "defenderDaysBeforeDeletingQuarantinedMalware": 12,
  "defenderScanMaxCpu": 2,
  "defenderScanArchiveFiles": true,
  "defenderScanIncomingMail": true,
  "defenderScanRemovableDrivesDuringFullScan": true,
  "defenderScanMappedNetworkDrivesDuringFullScan": true,
  "defenderScanNetworkFiles": true,
  "defenderRequireCloudProtection": true,
  "defenderCloudBlockLevel": "high",
  "defenderCloudExtendedTimeout": 12,
  "defenderCloudExtendedTimeoutInSeconds": 5,
  "defenderPromptForSampleSubmission": "alwaysPrompt",
  "defenderScheduledQuickScanTime": "11:58:49.3840000",
  "defenderScanType": "disabled",
  "defenderSystemScanSchedule": "everyday",
  "defenderScheduledScanTime": "11:59:10.9990000",
  "defenderPotentiallyUnwantedAppAction": "block",
  "defenderPotentiallyUnwantedAppActionSetting": "enable",
  "defenderSubmitSamplesConsentType": "alwaysPrompt",
  "defenderBlockOnAccessProtection": true,
  "defenderDetectedMalwareActions": {
    "@odata.type": "microsoft.graph.defenderDetectedMalwareActions",
    "lowSeverity": "clean",
    "moderateSeverity": "clean",
    "highSeverity": "clean",
    "severeSeverity": "clean"
  },
  "defenderFileExtensionsToExclude": [
    "Defender File Extensions To Exclude value"
  ],
  "defenderFilesAndFoldersToExclude": [
    "Defender Files And Folders To Exclude value"
  ],
  "defenderProcessesToExclude": [
    "Defender Processes To Exclude value"
  ],
  "lockScreenAllowTimeoutConfiguration": true,
  "lockScreenBlockActionCenterNotifications": true,
  "lockScreenBlockCortana": true,
  "lockScreenBlockToastNotifications": true,
  "lockScreenTimeoutInSeconds": 10,
  "lockScreenActivateAppsWithVoice": "enabled",
  "passwordBlockSimple": true,
  "passwordExpirationDays": 6,
  "passwordMinimumLength": 5,
  "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
  "passwordMinimumCharacterSetCount": 0,
  "passwordPreviousPasswordBlockCount": 2,
  "passwordRequired": true,
  "passwordRequireWhenResumeFromIdleState": true,
  "passwordRequiredType": "alphanumeric",
  "passwordSignInFailureCountBeforeFactoryReset": 12,
  "passwordMinimumAgeInDays": 8,
  "privacyAdvertisingId": "blocked",
  "privacyAutoAcceptPairingAndConsentPrompts": true,
  "privacyDisableLaunchExperience": true,
  "privacyBlockInputPersonalization": true,
  "privacyBlockPublishUserActivities": true,
  "privacyBlockActivityFeed": true,
  "activateAppsWithVoice": "enabled",
  "startBlockUnpinningAppsFromTaskbar": true,
  "startMenuAppListVisibility": "collapse",
  "startMenuHideChangeAccountSettings": true,
  "startMenuHideFrequentlyUsedApps": true,
  "startMenuHideHibernate": true,
  "startMenuHideLock": true,
  "startMenuHidePowerButton": true,
  "startMenuHideRecentJumpLists": true,
  "startMenuHideRecentlyAddedApps": true,
  "startMenuHideRestartOptions": true,
  "startMenuHideShutDown": true,
  "startMenuHideSignOut": true,
  "startMenuHideSleep": true,
  "startMenuHideSwitchAccount": true,
  "startMenuHideUserTile": true,
  "startMenuLayoutEdgeAssetsXml": "c3RhcnRNZW51TGF5b3V0RWRnZUFzc2V0c1htbA==",
  "startMenuLayoutXml": "c3RhcnRNZW51TGF5b3V0WG1s",
  "startMenuMode": "fullScreen",
  "startMenuPinnedFolderDocuments": "hide",
  "startMenuPinnedFolderDownloads": "hide",
  "startMenuPinnedFolderFileExplorer": "hide",
  "startMenuPinnedFolderHomeGroup": "hide",
  "startMenuPinnedFolderMusic": "hide",
  "startMenuPinnedFolderNetwork": "hide",
  "startMenuPinnedFolderPersonalFolder": "hide",
  "startMenuPinnedFolderPictures": "hide",
  "startMenuPinnedFolderSettings": "hide",
  "startMenuPinnedFolderVideos": "hide",
  "settingsBlockSettingsApp": true,
  "settingsBlockSystemPage": true,
  "settingsBlockDevicesPage": true,
  "settingsBlockNetworkInternetPage": true,
  "settingsBlockPersonalizationPage": true,
  "settingsBlockAccountsPage": true,
  "settingsBlockTimeLanguagePage": true,
  "settingsBlockEaseOfAccessPage": true,
  "settingsBlockPrivacyPage": true,
  "settingsBlockUpdateSecurityPage": true,
  "settingsBlockAppsPage": true,
  "settingsBlockGamingPage": true,
  "windowsSpotlightBlockConsumerSpecificFeatures": true,
  "windowsSpotlightBlocked": true,
  "windowsSpotlightBlockOnActionCenter": true,
  "windowsSpotlightBlockTailoredExperiences": true,
  "windowsSpotlightBlockThirdPartyNotifications": true,
  "windowsSpotlightBlockWelcomeExperience": true,
  "windowsSpotlightBlockWindowsTips": true,
  "windowsSpotlightConfigureOnLockScreen": "disabled",
  "networkProxyApplySettingsDeviceWide": true,
  "networkProxyDisableAutoDetect": true,
  "networkProxyAutomaticConfigurationUrl": "https://example.com/networkProxyAutomaticConfigurationUrl/",
  "networkProxyServer": {
    "@odata.type": "microsoft.graph.windows10NetworkProxyServer",
    "address": "Address value",
    "exceptions": [
      "Exceptions value"
    ],
    "useForLocalAddresses": true
  },
  "accountsBlockAddingNonMicrosoftAccountEmail": true,
  "antiTheftModeBlocked": true,
  "bluetoothBlocked": true,
  "cameraBlocked": true,
  "connectedDevicesServiceBlocked": true,
  "certificatesBlockManualRootCertificateInstallation": true,
  "copyPasteBlocked": true,
  "cortanaBlocked": true,
  "deviceManagementBlockFactoryResetOnMobile": true,
  "deviceManagementBlockManualUnenroll": true,
  "safeSearchFilter": "strict",
  "edgeBlockPopups": true,
  "edgeBlockSearchSuggestions": true,
  "edgeBlockSearchEngineCustomization": true,
  "edgeBlockSendingIntranetTrafficToInternetExplorer": true,
  "edgeSendIntranetTrafficToInternetExplorer": true,
  "edgeRequireSmartScreen": true,
  "edgeEnterpriseModeSiteListLocation": "Edge Enterprise Mode Site List Location value",
  "edgeFirstRunUrl": "https://example.com/edgeFirstRunUrl/",
  "edgeSearchEngine": {
    "@odata.type": "microsoft.graph.edgeSearchEngineBase"
  },
  "edgeHomepageUrls": [
    "Edge Homepage Urls value"
  ],
  "edgeBlockAccessToAboutFlags": true,
  "smartScreenBlockPromptOverride": true,
  "smartScreenBlockPromptOverrideForFiles": true,
  "webRtcBlockLocalhostIpAddress": true,
  "internetSharingBlocked": true,
  "settingsBlockAddProvisioningPackage": true,
  "settingsBlockRemoveProvisioningPackage": true,
  "settingsBlockChangeSystemTime": true,
  "settingsBlockEditDeviceName": true,
  "settingsBlockChangeRegion": true,
  "settingsBlockChangeLanguage": true,
  "settingsBlockChangePowerSleep": true,
  "locationServicesBlocked": true,
  "microsoftAccountBlocked": true,
  "microsoftAccountBlockSettingsSync": true,
  "nfcBlocked": true,
  "resetProtectionModeBlocked": true,
  "screenCaptureBlocked": true,
  "storageBlockRemovableStorage": true,
  "storageRequireMobileDeviceEncryption": true,
  "usbBlocked": true,
  "voiceRecordingBlocked": true,
  "wiFiBlockAutomaticConnectHotspots": true,
  "wiFiBlocked": true,
  "wiFiBlockManualConfiguration": true,
  "wiFiScanInterval": 0,
  "wirelessDisplayBlockProjectionToThisDevice": true,
  "wirelessDisplayBlockUserInputFromReceiver": true,
  "wirelessDisplayRequirePinForPairing": true,
  "windowsStoreBlocked": true,
  "appsAllowTrustedAppsSideloading": "blocked",
  "windowsStoreBlockAutoUpdate": true,
  "developerUnlockSetting": "blocked",
  "sharedUserAppDataAllowed": true,
  "appsBlockWindowsStoreOriginatedApps": true,
  "windowsStoreEnablePrivateStoreOnly": true,
  "storageRestrictAppDataToSystemVolume": true,
  "storageRestrictAppInstallToSystemVolume": true,
  "gameDvrBlocked": true,
  "experienceBlockDeviceDiscovery": true,
  "experienceBlockErrorDialogWhenNoSIM": true,
  "experienceBlockTaskSwitcher": true,
  "logonBlockFastUserSwitching": true,
  "tenantLockdownRequireNetworkDuringOutOfBoxExperience": true,
  "appManagementMSIAllowUserControlOverInstall": true,
  "appManagementMSIAlwaysInstallWithElevatedPrivileges": true,
  "dataProtectionBlockDirectMemoryAccess": true,
  "appManagementPackageFamilyNamesToLaunchAfterLogOn": [
    "App Management Package Family Names To Launch After Log On value"
  ],
  "uninstallBuiltInApps": true,
  "configureTimeZone": "Configure Time Zone value"
}

Response

Here is an example of the response. Note: The response object shown here may be truncated for brevity. All of the properties will be returned from an actual call.

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 15181

{
  "@odata.type": "#microsoft.graph.windows10GeneralConfiguration",
  "id": "a4235d71-5d71-a423-715d-23a4715d23a4",
  "lastModifiedDateTime": "2017-01-01T00:00:35.1329464-08:00",
  "roleScopeTagIds": [
    "Role Scope Tag Ids value"
  ],
  "supportsScopeTags": true,
  "deviceManagementApplicabilityRuleOsEdition": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsEdition",
    "osEditionTypes": [
      "windows10EnterpriseN"
    ],
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleOsVersion": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleOsVersion",
    "minOSVersion": "Min OSVersion value",
    "maxOSVersion": "Max OSVersion value",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "deviceManagementApplicabilityRuleDeviceMode": {
    "@odata.type": "microsoft.graph.deviceManagementApplicabilityRuleDeviceMode",
    "deviceMode": "sModeConfiguration",
    "name": "Name value",
    "ruleType": "exclude"
  },
  "createdDateTime": "2017-01-01T00:02:43.5775965-08:00",
  "description": "Description value",
  "displayName": "Display Name value",
  "version": 7,
  "taskManagerBlockEndTask": true,
  "energySaverOnBatteryThresholdPercentage": 7,
  "energySaverPluggedInThresholdPercentage": 7,
  "powerLidCloseActionOnBattery": "noAction",
  "powerLidCloseActionPluggedIn": "noAction",
  "powerButtonActionOnBattery": "noAction",
  "powerButtonActionPluggedIn": "noAction",
  "powerSleepButtonActionOnBattery": "noAction",
  "powerSleepButtonActionPluggedIn": "noAction",
  "powerHybridSleepOnBattery": "enabled",
  "powerHybridSleepPluggedIn": "enabled",
  "windows10AppsForceUpdateSchedule": {
    "@odata.type": "microsoft.graph.windows10AppsForceUpdateSchedule",
    "startDateTime": "2016-12-31T23:58:46.7156189-08:00",
    "recurrence": "daily",
    "runImmediatelyIfAfterStartDateTime": true
  },
  "enableAutomaticRedeployment": true,
  "microsoftAccountSignInAssistantSettings": "disabled",
  "authenticationAllowSecondaryDevice": true,
  "authenticationWebSignIn": "enabled",
  "authenticationPreferredAzureADTenantDomainName": "Authentication Preferred Azure ADTenant Domain Name value",
  "cryptographyAllowFipsAlgorithmPolicy": true,
  "displayAppListWithGdiDPIScalingTurnedOn": [
    "Display App List With Gdi DPIScaling Turned On value"
  ],
  "displayAppListWithGdiDPIScalingTurnedOff": [
    "Display App List With Gdi DPIScaling Turned Off value"
  ],
  "enterpriseCloudPrintDiscoveryEndPoint": "Enterprise Cloud Print Discovery End Point value",
  "enterpriseCloudPrintOAuthAuthority": "Enterprise Cloud Print OAuth Authority value",
  "enterpriseCloudPrintOAuthClientIdentifier": "Enterprise Cloud Print OAuth Client Identifier value",
  "enterpriseCloudPrintResourceIdentifier": "Enterprise Cloud Print Resource Identifier value",
  "enterpriseCloudPrintDiscoveryMaxLimit": 5,
  "enterpriseCloudPrintMopriaDiscoveryResourceIdentifier": "Enterprise Cloud Print Mopria Discovery Resource Identifier value",
  "experienceDoNotSyncBrowserSettings": "blockedWithUserOverride",
  "messagingBlockSync": true,
  "messagingBlockMMS": true,
  "messagingBlockRichCommunicationServices": true,
  "printerNames": [
    "Printer Names value"
  ],
  "printerDefaultName": "Printer Default Name value",
  "printerBlockAddition": true,
  "searchBlockDiacritics": true,
  "searchDisableAutoLanguageDetection": true,
  "searchDisableIndexingEncryptedItems": true,
  "searchEnableRemoteQueries": true,
  "searchDisableUseLocation": true,
  "searchDisableLocation": true,
  "searchDisableIndexerBackoff": true,
  "searchDisableIndexingRemovableDrive": true,
  "searchEnableAutomaticIndexSizeManangement": true,
  "searchBlockWebResults": true,
  "findMyFiles": "enabled",
  "securityBlockAzureADJoinedDevicesAutoEncryption": true,
  "diagnosticsDataSubmissionMode": "none",
  "oneDriveDisableFileSync": true,
  "systemTelemetryProxyServer": "System Telemetry Proxy Server value",
  "edgeTelemetryForMicrosoft365Analytics": "intranet",
  "inkWorkspaceAccess": "enabled",
  "inkWorkspaceAccessState": "blocked",
  "inkWorkspaceBlockSuggestedApps": true,
  "smartScreenEnableAppInstallControl": true,
  "smartScreenAppInstallControl": "anywhere",
  "personalizationDesktopImageUrl": "https://example.com/personalizationDesktopImageUrl/",
  "personalizationLockScreenImageUrl": "https://example.com/personalizationLockScreenImageUrl/",
  "bluetoothAllowedServices": [
    "Bluetooth Allowed Services value"
  ],
  "bluetoothBlockAdvertising": true,
  "bluetoothBlockPromptedProximalConnections": true,
  "bluetoothBlockDiscoverableMode": true,
  "bluetoothBlockPrePairing": true,
  "edgeBlockAutofill": true,
  "edgeBlocked": true,
  "edgeCookiePolicy": "allow",
  "edgeBlockDeveloperTools": true,
  "edgeBlockSendingDoNotTrackHeader": true,
  "edgeBlockExtensions": true,
  "edgeBlockInPrivateBrowsing": true,
  "edgeBlockJavaScript": true,
  "edgeBlockPasswordManager": true,
  "edgeBlockAddressBarDropdown": true,
  "edgeBlockCompatibilityList": true,
  "edgeClearBrowsingDataOnExit": true,
  "edgeAllowStartPagesModification": true,
  "edgeDisableFirstRunPage": true,
  "edgeBlockLiveTileDataCollection": true,
  "edgeSyncFavoritesWithInternetExplorer": true,
  "edgeFavoritesListLocation": "Edge Favorites List Location value",
  "edgeBlockEditFavorites": true,
  "edgeNewTabPageURL": "Edge New Tab Page URL value",
  "edgeHomeButtonConfiguration": {
    "@odata.type": "microsoft.graph.edgeHomeButtonConfiguration"
  },
  "edgeHomeButtonConfigurationEnabled": true,
  "edgeOpensWith": "startPage",
  "edgeBlockSideloadingExtensions": true,
  "edgeRequiredExtensionPackageFamilyNames": [
    "Edge Required Extension Package Family Names value"
  ],
  "edgeBlockPrinting": true,
  "edgeFavoritesBarVisibility": "hide",
  "edgeBlockSavingHistory": true,
  "edgeBlockFullScreenMode": true,
  "edgeBlockWebContentOnNewTabPage": true,
  "edgeBlockTabPreloading": true,
  "edgeBlockPrelaunch": true,
  "edgeShowMessageWhenOpeningInternetExplorerSites": "disabled",
  "edgePreventCertificateErrorOverride": true,
  "edgeKioskModeRestriction": "digitalSignage",
  "edgeKioskResetAfterIdleTimeInMinutes": 4,
  "cellularBlockDataWhenRoaming": true,
  "cellularBlockVpn": true,
  "cellularBlockVpnWhenRoaming": true,
  "cellularData": "required",
  "defenderRequireRealTimeMonitoring": true,
  "defenderRequireBehaviorMonitoring": true,
  "defenderRequireNetworkInspectionSystem": true,
  "defenderScanDownloads": true,
  "defenderScheduleScanEnableLowCpuPriority": true,
  "defenderDisableCatchupQuickScan": true,
  "defenderDisableCatchupFullScan": true,
  "defenderScanScriptsLoadedInInternetExplorer": true,
  "defenderBlockEndUserAccess": true,
  "defenderSignatureUpdateIntervalInHours": 6,
  "defenderMonitorFileActivity": "disable",
  "defenderDaysBeforeDeletingQuarantinedMalware": 12,
  "defenderScanMaxCpu": 2,
  "defenderScanArchiveFiles": true,
  "defenderScanIncomingMail": true,
  "defenderScanRemovableDrivesDuringFullScan": true,
  "defenderScanMappedNetworkDrivesDuringFullScan": true,
  "defenderScanNetworkFiles": true,
  "defenderRequireCloudProtection": true,
  "defenderCloudBlockLevel": "high",
  "defenderCloudExtendedTimeout": 12,
  "defenderCloudExtendedTimeoutInSeconds": 5,
  "defenderPromptForSampleSubmission": "alwaysPrompt",
  "defenderScheduledQuickScanTime": "11:58:49.3840000",
  "defenderScanType": "disabled",
  "defenderSystemScanSchedule": "everyday",
  "defenderScheduledScanTime": "11:59:10.9990000",
  "defenderPotentiallyUnwantedAppAction": "block",
  "defenderPotentiallyUnwantedAppActionSetting": "enable",
  "defenderSubmitSamplesConsentType": "alwaysPrompt",
  "defenderBlockOnAccessProtection": true,
  "defenderDetectedMalwareActions": {
    "@odata.type": "microsoft.graph.defenderDetectedMalwareActions",
    "lowSeverity": "clean",
    "moderateSeverity": "clean",
    "highSeverity": "clean",
    "severeSeverity": "clean"
  },
  "defenderFileExtensionsToExclude": [
    "Defender File Extensions To Exclude value"
  ],
  "defenderFilesAndFoldersToExclude": [
    "Defender Files And Folders To Exclude value"
  ],
  "defenderProcessesToExclude": [
    "Defender Processes To Exclude value"
  ],
  "lockScreenAllowTimeoutConfiguration": true,
  "lockScreenBlockActionCenterNotifications": true,
  "lockScreenBlockCortana": true,
  "lockScreenBlockToastNotifications": true,
  "lockScreenTimeoutInSeconds": 10,
  "lockScreenActivateAppsWithVoice": "enabled",
  "passwordBlockSimple": true,
  "passwordExpirationDays": 6,
  "passwordMinimumLength": 5,
  "passwordMinutesOfInactivityBeforeScreenTimeout": 14,
  "passwordMinimumCharacterSetCount": 0,
  "passwordPreviousPasswordBlockCount": 2,
  "passwordRequired": true,
  "passwordRequireWhenResumeFromIdleState": true,
  "passwordRequiredType": "alphanumeric",
  "passwordSignInFailureCountBeforeFactoryReset": 12,
  "passwordMinimumAgeInDays": 8,
  "privacyAdvertisingId": "blocked",
  "privacyAutoAcceptPairingAndConsentPrompts": true,
  "privacyDisableLaunchExperience": true,
  "privacyBlockInputPersonalization": true,
  "privacyBlockPublishUserActivities": true,
  "privacyBlockActivityFeed": true,
  "activateAppsWithVoice": "enabled",
  "startBlockUnpinningAppsFromTaskbar": true,
  "startMenuAppListVisibility": "collapse",
  "startMenuHideChangeAccountSettings": true,
  "startMenuHideFrequentlyUsedApps": true,
  "startMenuHideHibernate": true,
  "startMenuHideLock": true,
  "startMenuHidePowerButton": true,
  "startMenuHideRecentJumpLists": true,
  "startMenuHideRecentlyAddedApps": true,
  "startMenuHideRestartOptions": true,
  "startMenuHideShutDown": true,
  "startMenuHideSignOut": true,
  "startMenuHideSleep": true,
  "startMenuHideSwitchAccount": true,
  "startMenuHideUserTile": true,
  "startMenuLayoutEdgeAssetsXml": "c3RhcnRNZW51TGF5b3V0RWRnZUFzc2V0c1htbA==",
  "startMenuLayoutXml": "c3RhcnRNZW51TGF5b3V0WG1s",
  "startMenuMode": "fullScreen",
  "startMenuPinnedFolderDocuments": "hide",
  "startMenuPinnedFolderDownloads": "hide",
  "startMenuPinnedFolderFileExplorer": "hide",
  "startMenuPinnedFolderHomeGroup": "hide",
  "startMenuPinnedFolderMusic": "hide",
  "startMenuPinnedFolderNetwork": "hide",
  "startMenuPinnedFolderPersonalFolder": "hide",
  "startMenuPinnedFolderPictures": "hide",
  "startMenuPinnedFolderSettings": "hide",
  "startMenuPinnedFolderVideos": "hide",
  "settingsBlockSettingsApp": true,
  "settingsBlockSystemPage": true,
  "settingsBlockDevicesPage": true,
  "settingsBlockNetworkInternetPage": true,
  "settingsBlockPersonalizationPage": true,
  "settingsBlockAccountsPage": true,
  "settingsBlockTimeLanguagePage": true,
  "settingsBlockEaseOfAccessPage": true,
  "settingsBlockPrivacyPage": true,
  "settingsBlockUpdateSecurityPage": true,
  "settingsBlockAppsPage": true,
  "settingsBlockGamingPage": true,
  "windowsSpotlightBlockConsumerSpecificFeatures": true,
  "windowsSpotlightBlocked": true,
  "windowsSpotlightBlockOnActionCenter": true,
  "windowsSpotlightBlockTailoredExperiences": true,
  "windowsSpotlightBlockThirdPartyNotifications": true,
  "windowsSpotlightBlockWelcomeExperience": true,
  "windowsSpotlightBlockWindowsTips": true,
  "windowsSpotlightConfigureOnLockScreen": "disabled",
  "networkProxyApplySettingsDeviceWide": true,
  "networkProxyDisableAutoDetect": true,
  "networkProxyAutomaticConfigurationUrl": "https://example.com/networkProxyAutomaticConfigurationUrl/",
  "networkProxyServer": {
    "@odata.type": "microsoft.graph.windows10NetworkProxyServer",
    "address": "Address value",
    "exceptions": [
      "Exceptions value"
    ],
    "useForLocalAddresses": true
  },
  "accountsBlockAddingNonMicrosoftAccountEmail": true,
  "antiTheftModeBlocked": true,
  "bluetoothBlocked": true,
  "cameraBlocked": true,
  "connectedDevicesServiceBlocked": true,
  "certificatesBlockManualRootCertificateInstallation": true,
  "copyPasteBlocked": true,
  "cortanaBlocked": true,
  "deviceManagementBlockFactoryResetOnMobile": true,
  "deviceManagementBlockManualUnenroll": true,
  "safeSearchFilter": "strict",
  "edgeBlockPopups": true,
  "edgeBlockSearchSuggestions": true,
  "edgeBlockSearchEngineCustomization": true,
  "edgeBlockSendingIntranetTrafficToInternetExplorer": true,
  "edgeSendIntranetTrafficToInternetExplorer": true,
  "edgeRequireSmartScreen": true,
  "edgeEnterpriseModeSiteListLocation": "Edge Enterprise Mode Site List Location value",
  "edgeFirstRunUrl": "https://example.com/edgeFirstRunUrl/",
  "edgeSearchEngine": {
    "@odata.type": "microsoft.graph.edgeSearchEngineBase"
  },
  "edgeHomepageUrls": [
    "Edge Homepage Urls value"
  ],
  "edgeBlockAccessToAboutFlags": true,
  "smartScreenBlockPromptOverride": true,
  "smartScreenBlockPromptOverrideForFiles": true,
  "webRtcBlockLocalhostIpAddress": true,
  "internetSharingBlocked": true,
  "settingsBlockAddProvisioningPackage": true,
  "settingsBlockRemoveProvisioningPackage": true,
  "settingsBlockChangeSystemTime": true,
  "settingsBlockEditDeviceName": true,
  "settingsBlockChangeRegion": true,
  "settingsBlockChangeLanguage": true,
  "settingsBlockChangePowerSleep": true,
  "locationServicesBlocked": true,
  "microsoftAccountBlocked": true,
  "microsoftAccountBlockSettingsSync": true,
  "nfcBlocked": true,
  "resetProtectionModeBlocked": true,
  "screenCaptureBlocked": true,
  "storageBlockRemovableStorage": true,
  "storageRequireMobileDeviceEncryption": true,
  "usbBlocked": true,
  "voiceRecordingBlocked": true,
  "wiFiBlockAutomaticConnectHotspots": true,
  "wiFiBlocked": true,
  "wiFiBlockManualConfiguration": true,
  "wiFiScanInterval": 0,
  "wirelessDisplayBlockProjectionToThisDevice": true,
  "wirelessDisplayBlockUserInputFromReceiver": true,
  "wirelessDisplayRequirePinForPairing": true,
  "windowsStoreBlocked": true,
  "appsAllowTrustedAppsSideloading": "blocked",
  "windowsStoreBlockAutoUpdate": true,
  "developerUnlockSetting": "blocked",
  "sharedUserAppDataAllowed": true,
  "appsBlockWindowsStoreOriginatedApps": true,
  "windowsStoreEnablePrivateStoreOnly": true,
  "storageRestrictAppDataToSystemVolume": true,
  "storageRestrictAppInstallToSystemVolume": true,
  "gameDvrBlocked": true,
  "experienceBlockDeviceDiscovery": true,
  "experienceBlockErrorDialogWhenNoSIM": true,
  "experienceBlockTaskSwitcher": true,
  "logonBlockFastUserSwitching": true,
  "tenantLockdownRequireNetworkDuringOutOfBoxExperience": true,
  "appManagementMSIAllowUserControlOverInstall": true,
  "appManagementMSIAlwaysInstallWithElevatedPrivileges": true,
  "dataProtectionBlockDirectMemoryAccess": true,
  "appManagementPackageFamilyNamesToLaunchAfterLogOn": [
    "App Management Package Family Names To Launch After Log On value"
  ],
  "uninstallBuiltInApps": true,
  "configureTimeZone": "Configure Time Zone value"
}