Policy CSP - Privacy


Privacy policies

Privacy/AllowAutoAcceptPairingAndPrivacyConsentPrompts
Privacy/AllowInputPersonalization
Privacy/DisableAdvertisingId
Privacy/EnableActivityFeed
Privacy/LetAppsAccessAccountInfo
Privacy/LetAppsAccessAccountInfo_ForceAllowTheseApps
Privacy/LetAppsAccessAccountInfo_ForceDenyTheseApps
Privacy/LetAppsAccessAccountInfo_UserInControlOfTheseApps
Privacy/LetAppsAccessCalendar
Privacy/LetAppsAccessCalendar_ForceAllowTheseApps
Privacy/LetAppsAccessCalendar_ForceDenyTheseApps
Privacy/LetAppsAccessCalendar_UserInControlOfTheseApps
Privacy/LetAppsAccessCallHistory
Privacy/LetAppsAccessCallHistory_ForceAllowTheseApps
Privacy/LetAppsAccessCallHistory_ForceDenyTheseApps
Privacy/LetAppsAccessCallHistory_UserInControlOfTheseApps
Privacy/LetAppsAccessCamera
Privacy/LetAppsAccessCamera_ForceAllowTheseApps
Privacy/LetAppsAccessCamera_ForceDenyTheseApps
Privacy/LetAppsAccessCamera_UserInControlOfTheseApps
Privacy/LetAppsAccessContacts
Privacy/LetAppsAccessContacts_ForceAllowTheseApps
Privacy/LetAppsAccessContacts_ForceDenyTheseApps
Privacy/LetAppsAccessContacts_UserInControlOfTheseApps
Privacy/LetAppsAccessEmail
Privacy/LetAppsAccessEmail_ForceAllowTheseApps
Privacy/LetAppsAccessEmail_ForceDenyTheseApps
Privacy/LetAppsAccessEmail_UserInControlOfTheseApps
Privacy/LetAppsAccessLocation
Privacy/LetAppsAccessLocation_ForceAllowTheseApps
Privacy/LetAppsAccessLocation_ForceDenyTheseApps
Privacy/LetAppsAccessLocation_UserInControlOfTheseApps
Privacy/LetAppsAccessMessaging
Privacy/LetAppsAccessMessaging_ForceAllowTheseApps
Privacy/LetAppsAccessMessaging_ForceDenyTheseApps
Privacy/LetAppsAccessMessaging_UserInControlOfTheseApps
Privacy/LetAppsAccessMicrophone
Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps
Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps
Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps
Privacy/LetAppsAccessMotion
Privacy/LetAppsAccessMotion_ForceAllowTheseApps
Privacy/LetAppsAccessMotion_ForceDenyTheseApps
Privacy/LetAppsAccessMotion_UserInControlOfTheseApps
Privacy/LetAppsAccessNotifications
Privacy/LetAppsAccessNotifications_ForceAllowTheseApps
Privacy/LetAppsAccessNotifications_ForceDenyTheseApps
Privacy/LetAppsAccessNotifications_UserInControlOfTheseApps
Privacy/LetAppsAccessPhone
Privacy/LetAppsAccessPhone_ForceAllowTheseApps
Privacy/LetAppsAccessPhone_ForceDenyTheseApps
Privacy/LetAppsAccessPhone_UserInControlOfTheseApps
Privacy/LetAppsAccessRadios
Privacy/LetAppsAccessRadios_ForceAllowTheseApps
Privacy/LetAppsAccessRadios_ForceDenyTheseApps
Privacy/LetAppsAccessRadios_UserInControlOfTheseApps
Privacy/LetAppsAccessTasks
Privacy/LetAppsAccessTasks_ForceAllowTheseApps
Privacy/LetAppsAccessTasks_ForceDenyTheseApps
Privacy/LetAppsAccessTasks_UserInControlOfTheseApps
Privacy/LetAppsAccessTrustedDevices
Privacy/LetAppsAccessTrustedDevices_ForceAllowTheseApps
Privacy/LetAppsAccessTrustedDevices_ForceDenyTheseApps
Privacy/LetAppsAccessTrustedDevices_UserInControlOfTheseApps
Privacy/LetAppsGetDiagnosticInfo
Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps
Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps
Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps
Privacy/LetAppsRunInBackground
Privacy/LetAppsRunInBackground_ForceAllowTheseApps
Privacy/LetAppsRunInBackground_ForceDenyTheseApps
Privacy/LetAppsRunInBackground_UserInControlOfTheseApps
Privacy/LetAppsSyncWithDevices
Privacy/LetAppsSyncWithDevices_ForceAllowTheseApps
Privacy/LetAppsSyncWithDevices_ForceDenyTheseApps
Privacy/LetAppsSyncWithDevices_UserInControlOfTheseApps
Privacy/PublishUserActivities

Privacy/AllowAutoAcceptPairingAndPrivacyConsentPrompts

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark3 check mark3 check mark3 check mark3 check mark check mark

Scope:

  • Device

Allows or disallows the automatic acceptance of the pairing and privacy user consent dialog when launching apps.

Note

There were issues reported with the previous release of this policy and a fix was added in Windows 10, version 1709.

Most restricted value is 0.

The following list shows the supported values:

  • 0 (default)– Not allowed.
  • 1 – Allowed.

Privacy/AllowInputPersonalization

Home Pro Business Enterprise Education Mobile Mobile Enterprise
cross mark check mark check mark check mark check mark check mark

Scope:

  • Device

Updated in Windows 10, version 1709. Allows the usage of cloud based speech services for Cortana, dictation, or Store applications. Setting this policy to 1, lets Microsoft use the user's voice data to improve cloud speech services for all users.

Most restricted value is 0.

ADMX Info:

  • GP English name: Allow input personalization
  • GP name: AllowInputPersonalization
  • GP path: Control Panel/Regional and Language Options
  • GP ADMX file name: Globalization.admx

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Privacy/DisableAdvertisingId

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Enables or disables the Advertising ID.

Most restricted value is 0.

ADMX Info:

  • GP English name: Turn off the advertising ID
  • GP name: DisableAdvertisingId
  • GP path: System/User Profiles
  • GP ADMX file name: UserProfiles.admx

The following list shows the supported values:

  • 0 – Disabled.
  • 1 – Enabled.
  • 65535 (default)- Not configured.

Privacy/EnableActivityFeed

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark3 check mark3 check mark3 check mark3 check mark3 check mark3 check mark3

Scope:

  • Device

Added in Windows 10, version 1709. Allows IT Admins to allow Apps/OS to publish to the activity feed.

ADMX Info:

  • GP English name: Enables Activity Feed
  • GP name: EnableActivityFeed
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

The following list shows the supported values:

  • 0 – Disabled. Apps/OS can't publish the activities and roaming is disabled. (not published to the cloud).
  • 1 – (default) Enabled. Apps/OS can publish the activities and will be roamed across device graph.

Privacy/LetAppsAccessAccountInfo

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access account information.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessAccountInfo_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to account information. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessAccountInfo_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to account information. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessAccountInfo_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the account information privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessAccountInfo policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access account information
  • GP name: LetAppsAccessAccountInfo
  • GP element: LetAppsAccessAccountInfo_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCalendar

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access the calendar.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessCalendar_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCalendar_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to the calendar. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCalendar_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the calendar privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCalendar policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access the calendar
  • GP name: LetAppsAccessCalendar
  • GP element: LetAppsAccessCalendar_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCallHistory

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access call history.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessCallHistory_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are allowed access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCallHistory_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. Listed Windows apps are denied access to call history. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCallHistory_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Windows apps. The user is able to control the call history privacy setting for the listed Windows apps. This setting overrides the default LetAppsAccessCallHistory policy setting for the specified Windows apps.

ADMX Info:

  • GP English name: Let Windows apps access call history
  • GP name: LetAppsAccessCallHistory
  • GP element: LetAppsAccessCallHistory_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCamera

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access the camera.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessCamera_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCamera_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the camera. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessCamera_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the camera privacy setting for the listed apps. This setting overrides the default LetAppsAccessCamera policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the camera
  • GP name: LetAppsAccessCamera
  • GP element: LetAppsAccessCamera_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessContacts

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access contacts.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessContacts_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessContacts_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to contacts. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessContacts_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the contacts privacy setting for the listed apps. This setting overrides the default LetAppsAccessContacts policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access contacts
  • GP name: LetAppsAccessContacts
  • GP element: LetAppsAccessContacts_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessEmail

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access email.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessEmail_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessEmail_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to email. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessEmail_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the email privacy setting for the listed apps. This setting overrides the default LetAppsAccessEmail policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access email
  • GP name: LetAppsAccessEmail
  • GP element: LetAppsAccessEmail_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessLocation

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access location.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessLocation_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessLocation_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to location. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessLocation_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the location privacy setting for the listed apps. This setting overrides the default LetAppsAccessLocation policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access location
  • GP name: LetAppsAccessLocation
  • GP element: LetAppsAccessLocation_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMessaging

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can read or send messages (text or MMS).

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessMessaging_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMessaging_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to read or send messages (text or MMS). This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMessaging_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the messaging privacy setting for the listed apps. This setting overrides the default LetAppsAccessMessaging policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access messaging
  • GP name: LetAppsAccessMessaging
  • GP element: LetAppsAccessMessaging_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMicrophone

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access the microphone.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessMicrophone_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMicrophone_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to the microphone. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMicrophone_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the microphone privacy setting for the listed apps. This setting overrides the default LetAppsAccessMicrophone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access the microphone
  • GP name: LetAppsAccessMicrophone
  • GP element: LetAppsAccessMicrophone_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMotion

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access motion data.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessMotion_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMotion_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to motion data. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessMotion_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the motion privacy setting for the listed apps. This setting overrides the default LetAppsAccessMotion policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access motion
  • GP name: LetAppsAccessMotion
  • GP element: LetAppsAccessMotion_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessNotifications

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access notifications.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessNotifications_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessNotifications_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to notifications. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessNotifications_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the notifications privacy setting for the listed apps. This setting overrides the default LetAppsAccessNotifications policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access notifications
  • GP name: LetAppsAccessNotifications
  • GP element: LetAppsAccessNotifications_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessPhone

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can make phone calls.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessPhone_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessPhone_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are not allowed to make phone calls. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessPhone_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the phone call privacy setting for the listed apps. This setting overrides the default LetAppsAccessPhone policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps make phone calls
  • GP name: LetAppsAccessPhone
  • GP element: LetAppsAccessPhone_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessRadios

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps have access to control radios.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessRadios_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessRadios_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to control radios. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessRadios_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the radios privacy setting for the listed apps. This setting overrides the default LetAppsAccessRadios policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps control radios
  • GP name: LetAppsAccessRadios
  • GP element: LetAppsAccessRadios_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1703. Specifies whether Windows apps can access tasks.

ADMX Info:

  • GP English name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are allowed access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied access to tasks. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTasks_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the tasks privacy setting for the listed apps. This setting overrides the default LetAppsAccessTasks policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access Tasks
  • GP name: LetAppsAccessTasks
  • GP element: LetAppsAccessTasks_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTrustedDevices

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can access trusted devices.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsAccessTrustedDevices_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTrustedDevices_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to trusted devices. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsAccessTrustedDevices_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'trusted devices' privacy setting for the listed apps. This setting overrides the default LetAppsAccessTrustedDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access trusted devices
  • GP name: LetAppsAccessTrustedDevices
  • GP element: LetAppsAccessTrustedDevices_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsGetDiagnosticInfo

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. Force allow, force deny or give user control of apps that can get diagnostic information about other running apps.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsGetDiagnosticInfo_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsGetDiagnosticInfo_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to diagnostic information about other running apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsGetDiagnosticInfo_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'get diagnostic info' privacy setting for the listed apps. This setting overrides the default LetAppsGetDiagnosticInfo policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps access diagnostic information about other apps
  • GP name: LetAppsGetDiagnosticInfo
  • GP element: LetAppsGetDiagnosticInfo_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsRunInBackground

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. Specifies whether Windows apps can run in the background.

Most restricted value is 2.

Warning

Be careful when determining which apps should have their background activity disabled. Communication apps normally update tiles and notifications through background processes. Turning off background activity for these types of apps could cause text message, email, and voicemail notifications to not function. This could also cause background email syncing to not function properly.

ADMX Info:

  • GP English name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control (default).
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsRunInBackground_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are able to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsRunInBackground_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps are denied the ability to run in the background. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsRunInBackground_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark2 check mark2 check mark2 check mark2 check mark2 check mark2

Scope:

  • Device

Added in Windows 10, version 1703. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the background apps privacy setting for the listed apps. This setting overrides the default LetAppsRunInBackground policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps run in the background
  • GP name: LetAppsRunInBackground
  • GP element: LetAppsRunInBackground_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsSyncWithDevices

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. Specifies whether Windows apps can sync with devices.

Most restricted value is 2.

ADMX Info:

  • GP English name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_Enum
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

The following list shows the supported values:

  • 0 – User in control.
  • 1 – Force allow.
  • 2 - Force deny.

Privacy/LetAppsSyncWithDevices_ForceAllowTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_ForceAllowTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsSyncWithDevices_ForceDenyTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. Listed apps will not have access to sync with devices. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_ForceDenyTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/LetAppsSyncWithDevices_UserInControlOfTheseApps

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark1 check mark1 check mark1 check mark1 check mark1 check mark1

Scope:

  • Device

Added in Windows 10, version 1607. List of semi-colon delimited Package Family Names of Microsoft Store Apps. The user is able to control the 'sync with devices' privacy setting for the listed apps. This setting overrides the default LetAppsSyncWithDevices policy setting for the specified apps.

ADMX Info:

  • GP English name: Let Windows apps communicate with unpaired devices
  • GP name: LetAppsSyncWithDevices
  • GP element: LetAppsSyncWithDevices_UserInControlOfTheseApps_List
  • GP path: Windows Components/App Privacy
  • GP ADMX file name: AppPrivacy.admx

Privacy/PublishUserActivities

Home Pro Business Enterprise Education Mobile Mobile Enterprise
check mark3 check mark3 check mark3 check mark3 check mark3 check mark3 check mark3

Scope:

  • Device

Added in Windows 10, version 1709. Allows It Admins to enable publishing of user activities to the activity feed.

ADMX Info:

  • GP English name: Allow publishing of User Activities
  • GP name: PublishUserActivities
  • GP path: System/OS Policies
  • GP ADMX file name: OSPolicy.admx

The following list shows the supported values:

  • 0 – Disabled. Apps/OS can't publish the user activities.
  • 1 – (default) Enabled. Apps/OS can publish the user activities.

Footnote:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.

Privacy policies supported by Windows Holographic for Business

Privacy policies supported by IoT Core

Privacy policies supported by Microsoft Surface Hub