Policy CSP - Storage


Storage policies

Storage/AllowDiskHealthModelUpdates
Storage/AllowStorageSenseGlobal
Storage/AllowStorageSenseTemporaryFilesCleanup
Storage/ConfigStorageSenseCloudContentDehydrationThreshold
Storage/ConfigStorageSenseDownloadsCleanupThreshold
Storage/ConfigStorageSenseGlobalCadence
Storage/ConfigStorageSenseRecycleBinCleanupThreshold
Storage/EnhancedStorageDevices
Storage/RemovableDiskDenyWriteAccess

Storage/AllowDiskHealthModelUpdates

Windows Edition Supported?
Home cross mark
Pro check mark3
Business check mark3
Enterprise check mark3
Education check mark3

Scope:

  • Device

Added in Windows 10, version 1709. Allows disk health model updates.

Value type is integer.

ADMX Info:

  • GP English name: Allow downloading updates to the Disk Failure Prediction Model
  • GP name: SH_AllowDiskHealthModelUpdates
  • GP path: System/Storage Health
  • GP ADMX file name: StorageHealth.admx

The following list shows the supported values:

  • 0 - Do not allow
  • 1 (default) - Allow

Storage/AllowStorageSenseGlobal

Windows Edition Supported?
Home
Pro check mark6
Business check mark6
Enterprise check mark6
Education check mark6

Scope:

  • Device

Storage Sense can automatically clean some of the user’s files to free up disk space. By default, Storage Sense is automatically turned on when the machine runs into low disk space and is set to run whenever the machine runs into storage pressure. This cadence can be changed in Storage settings or set with the Storage/ConfigStorageSenseGlobalCadence group policy.

If you enable this policy setting without setting a cadence, Storage Sense is turned on for the machine with the default cadence of "during low free disk space." Users cannot disable Storage Sense, but they can adjust the cadence (unless you also configure the Storage/ConfigStorageSenseGlobalCadence group policy).

If you disable this policy setting, the machine will turn off Storage Sense. Users cannot enable Storage Sense.

If you do not configure this policy setting, Storage Sense is turned off by default until the user runs into low disk space or the user enables it manually. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Allow Storage Sense
  • GP name: SS_AllowStorageSenseGlobal
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/AllowStorageSenseTemporaryFilesCleanup

Windows Edition Supported?
Home
Pro check mark6
Business check mark6
Enterprise check mark6
Education check mark6

Scope:

  • Device

When Storage Sense runs, it can delete the user’s temporary files that are not in use.

If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, Storage Sense will delete the user’s temporary files that are not in use. Users cannot disable this setting in Storage settings.

If you disable this policy setting, Storage Sense will not delete the user’s temporary files. Users cannot enable this setting in Storage settings.

If you do not configure this policy setting, Storage Sense will delete the user’s temporary files by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Allow Storage Sense Temporary Files cleanup
  • GP name: SS_AllowStorageSenseTemporaryFilesCleanup
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/ConfigStorageSenseCloudContentDehydrationThreshold

Windows Edition Supported?
Home
Pro check mark6
Business check mark6
Enterprise check mark6
Education check mark6

Scope:

  • Device

When Storage Sense runs, it can dehydrate cloud-backed content that hasn’t been opened in a certain amount of days.

If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, you must provide the minimum number of days a cloud-backed file can remain unopened before Storage Sense dehydrates it. Supported values are: 0–365.

If you set this value to zero, Storage Sense will not dehydrate any cloud-backed content. The default value is 0, which never dehydrates cloud-backed content.

If you disable or do not configure this policy setting, then Storage Sense will not dehydrate any cloud-backed content by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Configure Storage Sense Cloud Content dehydration threshold
  • GP name: SS_ConfigStorageSenseCloudContentDehydrationThreshold
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/ConfigStorageSenseDownloadsCleanupThreshold

Windows Edition Supported?
Home
Pro check mark6
Business check mark6
Enterprise check mark6
Education check mark6

Scope:

  • Device

When Storage Sense runs, it can delete files in the user’s Downloads folder if they haven’t been opened for more than a certain number of days.

If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, you must provide the minimum number of days a file can remain unopened before Storage Sense deletes it from the Downloads folder. Supported values are: 0-365.

If you set this value to zero, Storage Sense will not delete files in the user’s Downloads folder. The default is 0, or never deleting files in the Downloads folder.

If you disable or do not configure this policy setting, then Storage Sense will not delete files in the user’s Downloads folder by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Configure Storage Storage Downloads cleanup threshold
  • GP name: SS_ConfigStorageSenseDownloadsCleanupThreshold
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/ConfigStorageSenseGlobalCadence

Windows Edition Supported?
Home
Pro check mark6
Business check mark6
Enterprise check mark6
Education check mark6

Scope:

  • Device

Storage Sense can automatically clean some of the user’s files to free up disk space. If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, you must provide the desired Storage Sense cadence.

The following are supported options:

  • 1 – Daily
  • 7 – Weekly
  • 30 – Monthly
  • 0 – During low free disk space

The default is 0 (during low free disk space).

If you do not configure this policy setting, then the Storage Sense cadence is set to “during low free disk space” by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Configure Storage Sense cadence
  • GP name: SS_ConfigStorageSenseGlobalCadence
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/ConfigStorageSenseRecycleBinCleanupThreshold

Windows Edition Supported?
Home
Pro check mark6
Business check mark6
Enterprise check mark6
Education check mark6

Scope:

  • Device

When Storage Sense runs, it can delete files in the user’s Recycle Bin if they have been there for over a certain amount of days.

If the Storage/AllowStorageSenseGlobal policy is disabled, then this policy does not have any effect.

If you enable this policy setting, you must provide the minimum age threshold (in days) of a file in the Recycle Bin before Storage Sense will delete it. Supported values are: 0–365.

If you set this value to zero, Storage Sense will not delete files in the user’s Recycle Bin. The default is 30 days.

If you disable or do not configure this policy setting, Storage Sense will delete files in the user’s Recycle Bin that have been there for over 30 days by default. Users can configure this setting in Storage settings.

ADMX Info:

  • GP English name: Configure Storage Sense Recycle Bin cleanup threshold
  • GP name: SS_ConfigStorageSenseRecycleBinCleanupThreshold
  • GP path: System/Storage Sense
  • GP ADMX file name: StorageSense.admx

Storage/EnhancedStorageDevices

Windows Edition Supported?
Home cross mark
Pro check mark
Business check mark
Enterprise check mark
Education check mark

Scope:

  • Device

This policy setting configures whether or not Windows will activate an Enhanced Storage device.

If you enable this policy setting, Windows will not activate unactivated Enhanced Storage devices.

If you disable or do not configure this policy setting, Windows will activate unactivated Enhanced Storage devices.

Tip

This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.

You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

ADMX Info:

  • GP English name: Do not allow Windows to activate Enhanced Storage devices
  • GP name: TCGSecurityActivationDisabled
  • GP path: System/Enhanced Storage Access
  • GP ADMX file name: enhancedstorage.admx

Storage/RemovableDiskDenyWriteAccess

Windows Edition Supported?
Home cross mark
Pro check mark5
Business check mark5
Enterprise check mark5
Education check mark5

Scope:

  • Device

If you enable this policy setting, write access is denied to this removable storage class. If you disable or do not configure this policy setting, write access is allowed to this removable storage class.

Note

To require that users write data to BitLocker-protected storage, enable the policy setting "Deny write access to drives not protected by BitLocker," which is located in "Computer Configuration\Administrative Templates\Windows Components\BitLocker Drive Encryption\Removable Data Drives."

Supported values:

  • 0 - Disable
  • 1 - Enable

ADMX Info:

  • GP English name: Removable Disks: Deny write access
  • GP name: RemovableDisks_DenyWrite_Access_2
  • GP element: RemovableDisks_DenyWrite_Access_2
  • GP path: System/Removable Storage Access
  • GP ADMX file name: RemovableStorage.admx

Example for setting the device custom OMA-URI setting to enable this policy:
To deny write access to removable storage within Intune’s custom profile, set OMA-URI to .\[device|user]\vendor\msft\policy\[config|result]\Storage/RemovableDiskDenyWriteAccess, Data type to Integer, and Value to 1.

See Use custom settings for Windows 10 devices in Intune for information on how to create custom profiles.


Footnotes:

  • 1 - Added in Windows 10, version 1607.
  • 2 - Added in Windows 10, version 1703.
  • 3 - Added in Windows 10, version 1709.
  • 4 - Added in Windows 10, version 1803.
  • 5 - Added in Windows 10, version 1809.
  • 6 - Added in Windows 10, version 1903.