Policies in Policy CSP supported by Windows 10 Team
This article lists the policies in Policy CSP that are applicable for the Surface Hub operating system, Windows 10 Team.
ApplicationDefaults
ApplicationManagement
Bluetooth
- AllowAdvertising
- AllowDiscoverableMode
- AllowPrepairing
- AllowPromptedProximalConnections
- LocalDeviceName
- ServicesAllowedList
- SetMinimumEncryptionKeySize
Browser
- AllowAddressBarDropdown
- AllowAutofill
- AllowBrowser
- AllowCookies
- AllowDeveloperTools
- AllowDoNotTrack
- AllowFlashClickToRun
- AllowMicrosoftCompatibilityList
- AllowPasswordManager
- AllowPopups
- AllowSearchSuggestionsinAddressBar
- AllowSmartScreen
- ClearBrowsingDataOnExit
- ConfigureAdditionalSearchEngines
- DisableLockdownOfStartPages
- EnterpriseModeSiteList
- HomePages
- PreventLiveTileDataCollection
- PreventSmartScreenPromptOverride
- PreventSmartScreenPromptOverrideForFiles
- PreventUsingLocalHostIPAddressForWebRTC
- SetDefaultSearchEngine
Camera
Connectivity
Cryptography
- AllowFipsAlgorithmPolicy
- ConfigureEllipticCurveCryptography
- ConfigureSystemCryptographyForceStrongKeyProtection
- OverrideMinimumEnabledDTLSVersionClient
- OverrideMinimumEnabledDTLSVersionServer
- OverrideMinimumEnabledTLSVersionClient
- OverrideMinimumEnabledTLSVersionServer
- TLSCipherSuites
Defender
- AllowArchiveScanning
- AllowBehaviorMonitoring
- AllowCloudProtection
- AllowEmailScanning
- AllowFullScanOnMappedNetworkDrives
- AllowFullScanRemovableDriveScanning
- AllowIntrusionPreventionSystem
- AllowIOAVProtection
- AllowOnAccessProtection
- AllowRealtimeMonitoring
- AllowScanningNetworkFiles
- AllowScriptScanning
- AttackSurfaceReductionOnlyExclusions
- AttackSurfaceReductionRules
- AvgCPULoadFactor
- CheckForSignaturesBeforeRunningScan
- CloudBlockLevel
- CloudExtendedTimeout
- ControlledFolderAccessAllowedApplications
- ControlledFolderAccessProtectedFolders
- DaysToRetainCleanedMalware
- DisableCatchupFullScan
- DisableCatchupQuickScan
- EnableControlledFolderAccess
- EnableLowCPUPriority
- EnableNetworkProtection
- ExcludedExtensions
- ExcludedPaths
- ExcludedProcesses
- PUAProtection
- RealTimeScanDirection
- ScanParameter
- ScheduleQuickScanTime
- ScheduleScanDay
- ScheduleScanTime
- SecurityIntelligenceLocation
- SignatureUpdateFallbackOrder
- SignatureUpdateFileSharesSources
- SignatureUpdateInterval
- SubmitSamplesConsent
- ThreatSeverityDefaultAction
DeliveryOptimization
- DOAbsoluteMaxCacheSize
- DOAllowVPNPeerCaching
- DOCacheHost
- DOCacheHostSource
- DODelayBackgroundDownloadFromHttp
- DODelayCacheServerFallbackBackground
- DODelayCacheServerFallbackForeground
- DODelayForegroundDownloadFromHttp
- DODisallowCacheServerDownloadsOnVPN
- DODownloadMode
- DOGroupId
- DOGroupIdSource
- DOMaxBackgroundDownloadBandwidth
- DOMaxCacheAge
- DOMaxCacheSize
- DOMaxForegroundDownloadBandwidth
- DOMinBackgroundQos
- DOMinBatteryPercentageAllowedToUpload
- DOMinDiskSizeAllowedToPeer
- DOMinFileSizeToCache
- DOMinRAMAllowedToPeer
- DOModifyCacheDrive
- DOMonthlyUploadDataCap
- DOPercentageMaxBackgroundBandwidth
- DOPercentageMaxForegroundBandwidth
- DORestrictPeerSelectionBy
- DOSetHoursToLimitBackgroundDownloadBandwidth
- DOSetHoursToLimitForegroundDownloadBandwidth
- DOVpnKeywords
ExploitGuard
LocalUsersAndGroups
NetworkIsolation
- EnterpriseCloudResources
- EnterpriseInternalProxyServers
- EnterpriseIPRange
- EnterpriseIPRangesAreAuthoritative
- EnterpriseNetworkDomainNames
- EnterpriseProxyServers
- EnterpriseProxyServersAreAuthoritative
- NeutralResources
Privacy
- AllowInputPersonalization
- DisableAdvertisingId
- LetAppsAccessAccountInfo
- LetAppsAccessAccountInfo_ForceAllowTheseApps
- LetAppsAccessAccountInfo_ForceDenyTheseApps
- LetAppsAccessAccountInfo_UserInControlOfTheseApps
- LetAppsAccessCalendar
- LetAppsAccessCalendar_ForceAllowTheseApps
- LetAppsAccessCalendar_ForceDenyTheseApps
- LetAppsAccessCalendar_UserInControlOfTheseApps
- LetAppsAccessCallHistory
- LetAppsAccessCallHistory_ForceAllowTheseApps
- LetAppsAccessCallHistory_ForceDenyTheseApps
- LetAppsAccessCallHistory_UserInControlOfTheseApps
- LetAppsAccessCamera
- LetAppsAccessCamera_ForceAllowTheseApps
- LetAppsAccessCamera_ForceDenyTheseApps
- LetAppsAccessCamera_UserInControlOfTheseApps
- LetAppsAccessContacts
- LetAppsAccessContacts_ForceAllowTheseApps
- LetAppsAccessContacts_ForceDenyTheseApps
- LetAppsAccessContacts_UserInControlOfTheseApps
- LetAppsAccessEmail
- LetAppsAccessEmail_ForceAllowTheseApps
- LetAppsAccessEmail_ForceDenyTheseApps
- LetAppsAccessEmail_UserInControlOfTheseApps
- LetAppsAccessLocation
- LetAppsAccessLocation_ForceAllowTheseApps
- LetAppsAccessLocation_ForceDenyTheseApps
- LetAppsAccessLocation_UserInControlOfTheseApps
- LetAppsAccessMessaging
- LetAppsAccessMessaging_ForceAllowTheseApps
- LetAppsAccessMessaging_ForceDenyTheseApps
- LetAppsAccessMessaging_UserInControlOfTheseApps
- LetAppsAccessMicrophone
- LetAppsAccessMicrophone_ForceAllowTheseApps
- LetAppsAccessMicrophone_ForceDenyTheseApps
- LetAppsAccessMicrophone_UserInControlOfTheseApps
- LetAppsAccessNotifications
- LetAppsAccessNotifications_ForceAllowTheseApps
- LetAppsAccessNotifications_ForceDenyTheseApps
- LetAppsAccessNotifications_UserInControlOfTheseApps
- LetAppsAccessPhone
- LetAppsAccessPhone_ForceAllowTheseApps
- LetAppsAccessPhone_ForceDenyTheseApps
- LetAppsAccessPhone_UserInControlOfTheseApps
- LetAppsAccessRadios
- LetAppsAccessRadios_ForceAllowTheseApps
- LetAppsAccessRadios_ForceDenyTheseApps
- LetAppsAccessRadios_UserInControlOfTheseApps
- LetAppsAccessTasks
- LetAppsAccessTasks_ForceAllowTheseApps
- LetAppsAccessTasks_ForceDenyTheseApps
- LetAppsAccessTasks_UserInControlOfTheseApps
- LetAppsAccessTrustedDevices
- LetAppsAccessTrustedDevices_ForceAllowTheseApps
- LetAppsAccessTrustedDevices_ForceDenyTheseApps
- LetAppsAccessTrustedDevices_UserInControlOfTheseApps
- LetAppsActivateWithVoice
- LetAppsActivateWithVoiceAboveLock
- LetAppsGetDiagnosticInfo
- LetAppsGetDiagnosticInfo_ForceAllowTheseApps
- LetAppsGetDiagnosticInfo_ForceDenyTheseApps
- LetAppsGetDiagnosticInfo_UserInControlOfTheseApps
- LetAppsRunInBackground
- LetAppsRunInBackground_ForceAllowTheseApps
- LetAppsRunInBackground_ForceDenyTheseApps
- LetAppsRunInBackground_UserInControlOfTheseApps
- LetAppsSyncWithDevices
- LetAppsSyncWithDevices_ForceAllowTheseApps
- LetAppsSyncWithDevices_ForceDenyTheseApps
- LetAppsSyncWithDevices_UserInControlOfTheseApps
RestrictedGroups
Security
- RecoveryEnvironmentAuthentication
- RequireProvisioningPackageSignature
- RequireRetrieveHealthCertificateOnBoot
Start
System
- AllowBuildPreview
- AllowExperimentation
- AllowFontProviders
- AllowLocation
- AllowStorageCard
- AllowTelemetry
TextInput
- AllowHardwareKeyboardTextSuggestions
- AllowIMELogging
- AllowIMENetworkAccess
- AllowInputPanel
- AllowJapaneseIMESurrogatePairCharacters
- AllowJapaneseIVSCharacters
- AllowJapaneseNonPublishingStandardGlyph
- AllowJapaneseUserDictionary
- AllowKeyboardTextSuggestions
- AllowLanguageFeaturesUninstall
- AllowLinguisticDataCollection
- AllowTextInputSuggestionUpdate
- ConfigureJapaneseIMEVersion
- ConfigureKoreanIMEVersion
- ConfigureSimplifiedChineseIMEVersion
- ConfigureTraditionalChineseIMEVersion
- EnableTouchKeyboardAutoInvokeInDesktopMode
- ExcludeJapaneseIMEExceptJIS0208
- ExcludeJapaneseIMEExceptJIS0208andEUDC
- ExcludeJapaneseIMEExceptShiftJIS
- ForceTouchKeyboardDockedState
- TouchKeyboardDictationButtonAvailability
- TouchKeyboardEmojiButtonAvailability
- TouchKeyboardFullModeAvailability
- TouchKeyboardHandwritingModeAvailability
- TouchKeyboardNarrowModeAvailability
- TouchKeyboardSplitModeAvailability
- TouchKeyboardWideModeAvailability
TimeLanguageSettings
Update
- ActiveHoursEnd
- ActiveHoursMaxRange
- ActiveHoursStart
- AllowAutoUpdate
- AllowAutoWindowsUpdateDownloadOverMeteredNetwork
- AllowMUUpdateService
- AllowNonMicrosoftSignedUpdate
- AllowOptionalContent
- AllowTemporaryEnterpriseFeatureControl
- AllowUpdateService
- BranchReadinessLevel
- ConfigureFeatureUpdateUninstallPeriod
- DeferFeatureUpdatesPeriodInDays
- DeferQualityUpdatesPeriodInDays
- DeferUpdatePeriod
- DeferUpgradePeriod
- DetectionFrequency
- DisableDualScan
- DisableWUfBSafeguards
- DoNotEnforceEnterpriseTLSCertPinningForUpdateDetection
- ExcludeWUDriversInQualityUpdate
- FillEmptyContentUrls
- IgnoreMOAppDownloadLimit
- IgnoreMOUpdateDownloadLimit
- ManagePreviewBuilds
- PauseDeferrals
- PauseFeatureUpdates
- PauseFeatureUpdatesStartTime
- PauseQualityUpdates
- PauseQualityUpdatesStartTime
- RequireDeferUpgrade
- RequireUpdateApproval
- ScheduledInstallDay
- ScheduledInstallEveryWeek
- ScheduledInstallFirstWeek
- ScheduledInstallFourthWeek
- ScheduledInstallSecondWeek
- ScheduledInstallThirdWeek
- ScheduledInstallTime
- SetPolicyDrivenUpdateSourceForDriverUpdates
- SetPolicyDrivenUpdateSourceForFeatureUpdates
- SetPolicyDrivenUpdateSourceForOtherUpdates
- SetPolicyDrivenUpdateSourceForQualityUpdates
- SetProxyBehaviorForUpdateDetection
- UpdateServiceUrl
- UpdateServiceUrlAlternate
Wifi
WirelessDisplay
- AllowMdnsAdvertisement
- AllowMdnsDiscovery
- AllowMovementDetectionOnInfrastructure
- AllowPCReceiverToBeTCPServer
- AllowPCSenderToBeTCPClient
- AllowProjectionFromPC
- AllowProjectionFromPCOverInfrastructure
- AllowProjectionToPC
- AllowProjectionToPCOverInfrastructure
- AllowUserInputFromWirelessDisplayReceiver
- RequirePinForPairing
Related articles
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for