Policy CSP - Settings


Settings policies

Settings/AllowAutoPlay
Settings/AllowDataSense
Settings/AllowDateTime
Settings/AllowLanguage
Settings/AllowOnlineTips
Settings/AllowPowerSleep
Settings/AllowRegion
Settings/AllowSignInOptions
Settings/AllowVPN
Settings/AllowWorkplace
Settings/AllowYourAccount
Settings/ConfigureTaskbarCalendar
Settings/PageVisibilityList

Settings/AllowAutoPlay

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change Auto Play settings.

Note

 Setting this policy to 0 (Not allowed) does not affect the autoplay dialog box that appears when a device is connected.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowDataSense

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Allows the user to change Data Sense settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowDateTime

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Allows the user to change date and time settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowLanguage

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change the language settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowOnlineTips

Windows Edition Supported?
Home cross mark
Pro check mark3
Business check mark
Enterprise check mark3
Education check mark3

Scope:

  • Device

Enables or disables the retrieval of online tips and help for the Settings app.

If disabled, Settings will not contact Microsoft content services to retrieve tips and help content.

ADMX Info:

  • GP English name: Allow Online Tips
  • GP name: AllowOnlineTips
  • GP element: CheckBox_AllowOnlineTips
  • GP path: Control Panel
  • GP ADMX file name: ControlPanel.admx

Settings/AllowPowerSleep

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change power and sleep settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowRegion

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change the region settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowSignInOptions

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows the user to change sign-in options.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowVPN

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Allows the user to change VPN settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowWorkplace

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Note

 This policy is only enforced in Windows 10 for desktop and not supported in Windows 10 Mobile.

Allows user to change workplace settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/AllowYourAccount

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

Allows user to change account settings.

The following list shows the supported values:

  • 0 – Not allowed.
  • 1 (default) – Allowed.

Settings/ConfigureTaskbarCalendar

Windows Edition Supported?
Home cross mark
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

  • User

Added in Windows 10, version 1703. Allows IT Admins to configure the default setting for showing additional calendars (besides the default calendar for the locale) in the taskbar clock and calendar flyout. In this version of Windows 10, supported additional calendars are: Simplified or Traditional Chinese lunar calendar. Turning on one of these calendars will display Chinese lunar dates below the default calendar for the locale. Select "Don't show additional calendars" to prevent showing other calendars besides the default calendar for the locale.

ADMX Info:

  • GP English name: Show additional calendar
  • GP name: ConfigureTaskbarCalendar
  • GP path: Start Menu and Taskbar
  • GP ADMX file name: Taskbar.admx

The following list shows the supported values:

  • 0 (default) – User will be allowed to configure the setting.
  • 1 – Don't show additional calendars.
  • 2 - Simplified Chinese (Lunar).
  • 3 - Traditional Chinese (Lunar).

Settings/PageVisibilityList

Windows Edition Supported?
Home cross mark
Pro check mark2
Business check mark2
Enterprise check mark2
Education check mark2

Scope:

  • User
  • Device

Added in Windows 10, version 1703. Allows IT Admins to either prevent specific pages in the System Settings app from being visible or accessible, or to do so for all pages except those specified. The mode will be specified by the policy string beginning with either the string "showonly:" or "hide:".  Pages are identified by a shortened version of their already published URIs, which is the URI minus the "ms-settings:" prefix. For example, if the URI for a settings page is "ms-settings:bluetooth", the page identifier used in the policy will be just "bluetooth". Multiple page identifiers are separated by semicolons.

The following example illustrates a policy that would allow access only to the about and bluetooth pages, which have URI "ms-settings:about" and "ms-settings:bluetooth" respectively:

showonly:about;bluetooth

If the policy is not specified, the behavior will be that no pages are affected. If the policy string is formatted incorrectly, it will be ignored entirely (i.e. treated as not set) to prevent the machine from becoming unserviceable if data corruption occurs. Note that if a page is already hidden for another reason, then it will remain hidden even if it is in a "showonly:" list.

The format of the PageVisibilityList value is as follows:

  • The value is a unicode string up to 10,000 characters long, which will be used without case sensitivity.
  • There are two variants: one that shows only the given pages and one which hides the given pages.
  • The first variant starts with the string "showonly:" and the second with the string "hide:".
  • Following the variant identifier is a semicolon-delimited list of page identifiers, which must not have any extra whitespace.
  • Each page identifier is the ms-settings:xyz URI for the page, minus the ms-settings: prefix, so the identifier for the page with URI "ms-settings:network-wifi" would be just "network-wifi".

The default value for this setting is an empty string, which is interpreted as show everything.

Example 1, specifies that only the wifi and bluetooth pages should be shown (they have URIs ms-settings:network-wifi and ms-settings:bluetooth). All other pages (and the categories they're in) will be hidden:

showonly:network-wifi;bluetooth

Example 2, specifies that the wifi page should not be shown:

hide:network-wifi

ADMX Info:

  • GP English name: Settings Page Visibility
  • GP name: SettingsPageVisibility
  • GP element: SettingsPageVisibilityBox
  • GP path: Control Panel
  • GP ADMX file name: ControlPanel.admx

To validate on Desktop, do the following:

  1. Open System Settings and verify that the About page is visible and accessible.
  2. Configure the policy with the following string: "hide:about".
  3. Open System Settings again and verify that the About page is no longer accessible.

Footnotes:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.
  • 5 - Added in Windows 10, version 1809.
  • 6 - Added in Windows 10, version 1903.